• 09/10/26
• North West, Liverpool
• £400 - 425 per day
• Contract
• Product, Project Delivery & Transformation
• Full time

GRC Analyst (Cyber & Technology Risk) | Outside IR35 Contract

Location: North West | Hybrid Working

Rate: £425 per day | Outside IR35

Contract: Initial 6 Months with Potential Extension

Xpertise have partnered with a leading global organisation embarking on a significant cyber and technology risk maturity programme. We are looking for an experienced GRC Analyst with a strong risk management background to play a key role in shaping, building and embedding a robust risk function across a complex enterprise environment.

This is an excellent opportunity for a hands-on contractor who enjoys creating structure, driving accountability and working closely with stakeholders to improve the identification, assessment and treatment of technology and cyber risks.

Why Join?

• Opportunity to help build and mature a risk management function from the ground up
• Work within a large-scale, enterprise environment with exposure across Cyber Security, Technology and Business Operations
• Highly visible role with regular engagement across senior stakeholders
• Outside IR35 engagement with flexible hybrid working arrangements
• Chance to influence risk strategy, governance and reporting processes

The Role

As the GRC Analyst, you will take ownership of cyber and technology risk management activities, ensuring risks are identified, assessed, reported and managed effectively across the organisation.

Key Responsibilities

• Build, develop and maintain cyber and technology risk registers
• Identify, assess and document risks across technology, cyber security and business change initiatives
• Produce clear risk statements covering threats, vulnerabilities, business impact and existing controls
• Develop and maintain risk treatment plans, ensuring actions are owned and delivered
• Track remediation activities and challenge overdue actions where required
• Facilitate risk reviews and workshops with technical and non-technical stakeholders
• Support Cyber Assessment Framework (CAF) activities, evidence gathering and remediation tracking
• Produce high-quality risk reporting and management information for senior leadership
• Help establish consistent risk management processes, methodologies and governance controls
• Translate technical findings and control weaknesses into meaningful business risks

Skills & Experience Required

• Proven experience as a GRC Analyst, Technology Risk Analyst, Cyber Risk Analyst or Information Security Risk Analyst
• Strong practical experience owning and maintaining risk registers
• Demonstrable experience conducting risk assessments and developing risk treatment plans
• Ability to write meaningful risk statements and present complex risks clearly
• Strong stakeholder management skills with the confidence to operate independently from day one
• Experience tracking remediation and mitigation activities through to completion
• Excellent communication and reporting skills

Technical & Framework Experience

• NCSC Cyber Assessment Framework (CAF)
• ISO 27001
• NIST Cybersecurity Framework
• Enterprise Risk Management methodologies
• Cyber Security Governance, Risk & Compliance practices
• Risk Reporting, Control Assurance and Remediation Management

Desirable Experience

• Previous experience helping to build or mature a risk management function
• Exposure to large, complex enterprise organisations
• Experience engaging with senior leadership and executive stakeholders
• Understanding of cyber security controls and technology risk landscapes

Key Details

• GRC Analyst
• Outside IR35 Contract
• Hybrid Working
• North West Location
• Initial 6-Month Contract
• Immediate Start Available

Our Client are an equal opportunities employer. Xpertise is acting as an employment agency & business.

At Xpertise, we keep things human, your application will always be reviewed by a real person. We do not rely on AI or automated screening tools. Every candidate receives fair, considered attention from our team.

Right to work in the UK is required for this role.