Technology Risk / Compliance Analyst

Technology Risk / Compliance Analyst (GRC)

Up to £66,000 + benefits

Edinburgh or Glasgow | Hybrid - 2 days office / 3 days home

Our client is a fast-growing, well-established software business providing regulatory and compliance solutions to financial services organisations. They are looking for a Technology Risk / Compliance Analyst to join their Governance, Risk & Compliance function, reporting directly to the VP of GRC.

This role can be based out of either the Edinburgh or Glasgow office, working a hybrid pattern of 2 days in the office and 3 days from home.

This is a genuine opportunity to build specialist expertise in technology, cyber, data and third-party risk within a regulated financial services environment - with direct exposure to senior GRC oversight, governance forums, control assurance and client due diligence work.

What you'll be doing

Supporting risk and control self-assessments across technology, cyber security, data, cloud services and third-party/supplier risk
Analysing incidents, operational events and control data to identify trends, root causes and areas for improvement
Tracking risk actions and remediation plans, escalating overdue items where required
Maintaining key risk indicators and control information to support accurate governance and client assurance reporting
Preparing draft packs, dashboards and summary updates for senior GRC review
Supporting responses to client, audit and regulatory due diligence requests
Contributing to continuous improvement of risk processes, including the use of automation and AI-enabled toolsWhat we're looking for

Proven skills in a risk, audit, technology, cyber, data or controls role
Financial services background essential - experience working in, or with, a regulated environment
Experience with a GRC or compliance automation platform (e.g. Secureframe, Vanta, Drata or similar) is a strong plus
Naturally curious and proactive - comfortable identifying risks unprompted and confident challenging control owners on findings
Strong analytical skills and the ability to translate risk data into clear, actionable insight for technical, non-technical and client audiences
Awareness of frameworks such as ISO 27001, NIST, SOC 2, GDPR, DORA or operational resilience is desirableWhat's on offer

Salary up to £66,000 depending on experience
Hybrid working - 2 days in the office (Edinburgh or Glasgow), 3 days from home
Benefits package (pension, healthcare and further details on application)
Direct exposure to senior GRC leadership and governance forums
Genuine scope to shape and improve risk processes, not just maintain themIf the above sounds like you please send a copy of your latest CV for a confidential discussion

Guidant, Carbon60, Lorien & SRG - The Impellam Group Portfolio are acting as an Employment Business in relation to this vacancy
Only candidates based in UK and eligible to work in UK are allowed