GRC Analyst - Third Party Risk Management
24 days ago
Birmingham
GRC Analyst - Third Party Risk Management Fixed Term Contract, 12 months - £45k - £50k Location: Hybrid - Birmingham Your new company: I am looking to recruit a GRC Analyst, focusing on Third Party Risk Management, to join a leader in the hospitality space, with the role focusing on GRC activities, with a strong focus on information security, privacy, and regulatory assurance across the organisation. The role responsibilities: This role focusses on supplier assurance and third-party risk management, ensuring that vendors handling company data or connecting to company systems operate in line with security, privacy, and compliance expectations. Key parts of the role: • Conducting and coordinating security and privacy risk assessments for new and existing third-party suppliers., • Evaluating supplier controls relating to data protection, information security, data hosting, subcontractor usage, and system access., • Cataloguing and maintaining records of data shared with third parties, including purpose of use, information security classification, data sensitivity, and processing location., • Ensuring third party data handling arrangements clearly define data retention, archiving, and deletion requirements in line with policies and regulatory obligations., • Maintaining third party risk documentation and tracking remediation actions with suppliers and internal teams., • Working closely with Vendor Management, Procurement, Legal, Information Security, and IT to ensure supplier risks are identified early and addressed prior to onboarding or renewal., • Strong understanding of GDPR, the UK Data Protection Act, and privacy and security control requirements., • Experience working in GRC, information security, data protection, supplier assurance, or a related compliance role., • Ability to interpret and assess technical and organisational controls., • Strong analytical skills with excellent attention to detail., • Confident written and verbal communication skills, able to engage across legal, technical, and operational teams., • Experience contributing to incident or breach investigations., • Ability to manage multiple competing priorities and constructively challenge established processes., • Minimum 3 years' experience in a relevant role., • Salary of between £45k-£50k, • Hybrid working, • Company discounts, • A pension contribution matched at 1.5x, up to 5%., • Private healthcare, dental plan, cycle to work, and keep-fit schemes.
Chef & Cook
Waiters
Retail
Accounting & Finance
Driver & Delivery
Education
Engineering
Healthcare
Information Technology
Legal
Management
Manufacturing
Office & Admin
Sales & Marketing
Science
Security
Writing & Editing
Other