GRC Analyst

Posted Wednesday, 19 August 2026 at 00:00 Evri Group is the UK’s premier parcel delivery business, uniting four distinct brands—Evri, Evri Premium, a network of DHL, UK Mail and Irish e-commerce specialist Coll-8—to deliver more than 1 billion parcels and letters annually across the UK and to over 200 global destinations. With 12,000 colleagues, 30,000 couriers and drivers, 8,000 vehicles, and a nationwide network of hubs, depots and fulfilment centres, we combine over 50 years of expertise with the scale and flexibility to support everyone from casual senders to SMEs and major retailers. Driven by our friendly, ambitious and diverse people, we are passionate about delivering exceptional service and offer exciting opportunities across the Evri Group. Governance, Risk & Compliance (GRC) Analyst What if your work helped protect the systems, data and services that keep millions of parcels moving every day? At Evri, security, governance and risk management are critical to delivering trusted services at scale. As our technology landscape continues to evolve, we're investing in strengthening our security governance frameworks, risk management capabilities, and compliance processes to ensure we remain resilient, secure, and audit-ready. We're looking for a Governance, Risk & Compliance (GRC) Analyst to play a key role in helping us manage information risk, maintain compliance with industry standards, and support the governance processes that underpin our security strategy. If you enjoy analysing risk, improving controls, working across multiple stakeholders, and helping organisations navigate complex regulatory requirements, this could be the perfect next step in your career. Why this role is exciting This is far more than a compliance administration role. You'll work across Security, Technology, Legal, Privacy and Business teams, helping to embed governance frameworks, assess risks, support audits, and drive continuous improvements across the organisation. You'll gain exposure to a broad range of cybersecurity, privacy and risk management activities, including ISO 27001, NIST Cyber Security Framework, Cyber Essentials, PCI compliance, third-party risk management and emerging governance challenges surrounding AI technologies. Most importantly, you'll have the opportunity to influence how governance and risk management operate across a large and complex organisation. This role is hybrid, with regular collaboration from our Morley office. What you'll be doing Supporting the operational effectiveness of governance and security frameworks including ISO 27001, NIST CSF, Cyber Essentials and PCI Conducting control assessments across the business, identifying gaps and tracking remediation activities through to completion Supporting the development, maintenance and communication of information security policies, standards and procedures Facilitating information risk assessments with business and technical stakeholders Maintaining and improving the Information Risk Register and supporting ongoing risk management activities Supporting governance and risk management activities associated with AI technologies, including ethical use, security, transparency and regulatory considerations Coordinating evidence collection and supporting both internal and external audit activities Contributing to third-party risk management processes, including supplier due diligence and security assessments Producing governance reporting, risk metrics and management information for senior stakeholders and governance forums Identifying opportunities to improve governance processes, enhance controls and strengthen organisational risk maturity What you'll bring Experience working within Governance, Risk & Compliance, Information Security, Risk Management, Audit or a similar discipline Good knowledge of governance and compliance frameworks including: ISO 27001 NIST Cyber Security Framework (CSF) Cyber Essentials PCI DSS Understanding of information risk management methodologies and risk assessment processes Experience conducting control reviews and supporting assurance activities Exposure to audit processes and evidence management Strong analytical and problem-solving skills with excellent attention to detail Experience working with a broad range of stakeholders across technical and non-technical teams Excellent communication, organisation and prioritisation skills Experience with GRC tooling would be advantageous Why Evri At Evri, you'll have the opportunity to make a genuine impact on how security, governance and risk are managed across a large-scale technology environment. You'll work alongside passionate security, technology and business professionals who are committed to doing things the right way, continuously improving, and building a resilient organisation ready for the future. We'll give you the support, autonomy and development opportunities to grow your career while helping shape the governance landscape of one of the UK's leading parcel delivery businesses. Most importantly, you'll be part of a business that values different perspectives, encourages collaboration, and understands that great outcomes come from great people. We are Evri. Where everyone is welcome. We're excited about what's next. Let's deliver it together. Evri Group for everyone We’re committed to building a truly inclusive and diverse workplace where everyone can bring – and be – their whole authentic selves. We’re also on a mission to be the UK’s most accessible delivery business. We’ve partnered with Scope, the leading disability equality charity, to improve deliveries for millions of customers and give extra support to our colleagues and couriers who need it. Collaboration is key because we work better together. Bring passion, ambition and an open mind, and in return we’ll give you respect, flexibility and a place where you can thrive. At Evri Group, everyone is welcome.