Governance Risk and Compliance (GRC) Analyst

Location : Hybrid – Remote / Leeds UK Position Title : Governance, Risk and Compliance (GRC) Analyst Job Type : Full-Time About Us Assured Data Protection is a global leader in data backup and disaster recovery managed services, specialising in safeguarding against data loss and downtime in the event of a disaster, cyber, or ransomware attack. Our fully managed services include immutable backup, disaster recovery, and cyber resiliency to protect data on-premises and in the cloud, with 24/7/365 expert support. We offer a flexible, consumption-based model to grow with your business, making data protection cost-effective and scalable. Our purpose-built software provides industry-leading monitoring and reporting capabilities to provide actionable insights into your data protection strategy. Our global datacentres ensure data sovereignty, meeting your organisation’s compliance requirements. A dedicated team is always available to recover your data and minimise disruption in the event of a disaster. Job description As the Governance, Risk and Compliance Analyst, you will work under the direction of the Global Head of Compliance to ensure international compliance needs are met. The GRC analyst is a key member of the Governance, Risk and Compliance team, responsible for supporting the development, implementation and maintenance of the company’s GRC framework. The role involves a blend of operational and analytical tasks, working closely with various departments to ensure adherence to internal policies and external regulations. The role is critical for developing, implementing and maintaining the business’ GRC Framework, contributing to a culture of compliance, integrity and ethical conduct. Key Responsibilities: Governance Assist in maintaining our Information Security Management System (ISMS), Quality Management System (QMS) and SOC2 in our Compliance monitoring tooling. Support with policy development and creation. Compliance & Regulatory Adherence Complete customer, partner and vendor due diligence activities. Assist with internal and external audits. Identify and remedy gaps in policy and process to support compliance needs. Assist in the development of Compliance training programs to support a culture of compliance within the organisation. Risk Management Assist with our Risk Management process which includes maintenance of our Risk Register. Ensure identified risks and documented and logged on our InfoSec Risk Register. Key Experience and Qualifications: Preferred Qualifications Industry recognised certifications such as CRISC, ISO 27001 Lead Implementer would be highly beneficial. Experience Prior work experience or equivalent in the Technology sector. Prior work experience in international compliance frameworks and standards; such as UK & EU GDPR, HIPAA, PCI-DSS, NIST, SOC2, ISO 27001, ISO 9001. Project Management experience. Prior experience with compliance tooling. Experience working with Information Security and Legal Teams. Skills & Competencies Understanding of core Risk Management principles. Ability to embrace flexibility and adapt seamlessly to change. Ability to use initiative to solve complex problems. Ability to communicate with stakeholders at every seniority level of the business. What We Offer: Hybrid working options for flexibility Regular team-building and off-site company events. A dynamic, inclusive, and collaborative work environment At Assured Data Protection we value diversity and inclusivity. We offer perks such as flex holidays and flexible working practices to allow our employees to show up as their whole selves. We are an equal-opportunity employer, and we do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If you have a disability or special need that requires accommodation, please do not hesitate to let us know. You must have the legal right to work in the UK at the time of application, as we are unable to offer visa sponsorship for this role.