GRC/ Risk Framework Analyst

Role and location

Requirements

• Experience supporting GRC, risk management, internal control, assurance, compliance, quality governance, or management system activities.
• Working knowledge of risk identification, assessment, scoring, controls, treatment actions, ownership, review cycles, and reporting.
• Experience with risk registers, control matrices, action trackers, assurance plans, compliance mapping, audit findings, or governance reporting.
• Awareness of ISO 31000 or equivalent risk management good practice.
• Understanding of the three lines model, including first-line ownership, second-line oversight, and third-line assurance.
• Strong analytical and documentation skills for producing structured matrices, reports, trackers, and governance documents.
• Experience with cross-functional stakeholders in corporate, operational, regulated, critical infrastructure, or similar environments.
• Strong Microsoft Excel, Word, PowerPoint, Teams, and SharePoint/DMS capability.
• Excellent written English, attention to detail, and executive-ready communication skills.

Core competencies

• Risk analysis.
• GRC awareness.
• Three lines understanding.

Responsibilities