Senior Governance & Risk Analyst

Senior Governance & Risk Analyst

Senior GRC Analyst About the Company Join a dynamic organization known for its dedication to innovation, excellence, and robust risk management. Operating across various industries, this company offers a stable and growth-oriented environment for its employees. Role Overview We are looking for a highly skilled Senior GRC Analyst to shape and implement cyber risk principles, frameworks, and policies across the organization. This role provides vital oversight and collaboration with various departments to ensure consistency and transparency in cyber risk management. Positioned at the second line of defense, this role focuses on governance, risk, and oversight in the cybersecurity domain at a corporate level. Key Responsibilities Risk Oversight:






Assess and monitor the organization's cybersecurity risk posture. Develop and refine cyber risk control and reporting frameworks, methods, and maturity targets. Conduct and lead security risk assessments, including evaluations of supply chain security. Oversee vendor due diligence and perform comprehensive risk assessments. Partner with assurance teams to plan and review internal cybersecurity audits.
Cyber Governance and Policy Development:
Create and maintain policies, standards, and frameworks that foster a strong risk-aware culture and enhance cyber resilience. Design and implement cybersecurity control frameworks and testing requirements for departmental use.
Cyber Risk Reporting:
Evaluate and enhance cyber risk data analysis, metrics reporting (KRIs), consolidated risk profiles, and reporting methodologies. Prepare executive-level communications on cybersecurity to support informed business decision-making.





Improve board and executive-level reporting on cyber risk and governance.
Key Accountabilities:
Engage with stakeholders across departments to understand their needs, ensuring that cyber policies, risk reporting, and metrics remain relevant and effective. Stay informed about the latest cybersecurity threats, vulnerabilities, and regulations. Support assurance functions in planning and reviewing internal cybersecurity audits. Provide knowledge transfer and advisory services to departments to enhance their cyber risk management strategies. Promote a community of practice for security risk management to share knowledge and improve standards continuously.
Skills, Experience, and Attributes Education:
Bachelor’s Degree in IT, Engineering, or related fields required. MS/MBA is advantageous.





Relevant certifications (ISO 27001, CISA, CRISC, CGEIT, ITIL, COBIT, PCI DSS) are preferred.
Professional Experience:
At least 6 years of experience in a similar role. Proven track record in designing, reporting, and managing operational risk metrics for technology and cybersecurity practitioners and executives. Experience in developing and implementing security policies, standards, and conducting risk assessments. Experience in testing the effectiveness of security controls and operating in regulated, multi-industry environments is desirable.
Skills/Knowledge:
Strong understanding of IT Governance, Cyber Risk Management, and related frameworks and methodologies. Proficiency in Microsoft Excel, Word, and Power Point; skills in Power BI are a plus.





Familiarity with tools like Slack, Atlassian JIRA, Confluence, and Monday.
Personal Attributes:
Demonstrates behaviors consistent with the company’s values and ways of working. Excellent communication skills, both written and verbal. Strong influencing and relationship-building skills. Critical thinking and problem-solving abilities. Ability to work effectively in a matrix environment and across teams. Flexibility and reliability to go the extra mile to achieve outcomes.
Why Join Our Client? Innovative Environment: Engage with cutting-edge technologies and methodologies. Growth Opportunities: Opportunities for professional development and career advancement. Collaborative Culture:





Work with a team of skilled professionals dedicated to excellence and innovation. Impactful Work: Contribute to critical risk management initiatives that shape the organization's future.
#J-18808-Ljbffr

▶️ Senior Governance & Risk Analyst
🖊️ Latitude IT
📍 Haymarket