Compliance Analyst - GRC

Our vision is to give everyone the belief they can make their move. We aim to make moving simpler, by giving everyone the best place to turn to and return to for access to the tools, expertise, trust, and belief to make it happen.

We’re home to the UK’s largest choice of properties and are the go-to destination for millions of people planning their next move, reading the latest industry news, or just browsing what’s on the market.

Location :London - 2 days per week
Reports to: Head of Technology Risk and Assurance

The role

• We areseekinga proactive and detail-oriented GRC Analyst
  to join our Technology Risk team. This is a vital, hands-on role supporting the Head of Technology Risk and Delivery Assurance in executing our wider tech risk roadmap andmaintaininga secure, compliant environment.
• This role requires someone who is a confident communicator, comfortable owning projects, and motivated to develop andestablishthemselves within the field of GRC (governance, risk & compliance) and information security.
• As a
  GRC Analyst
  , you will play a pivotal role in the day-to-day implementation and management of key systems and processes at Rightmove. A significant part of the role involves acting as a bridge between compliance requirements and our technical teams. You willbe responsible for implementing and running governance and security projects, translating requirements into actionable outputs that embed seamlessly into our product and engineering workflows.
• This is an excellent opportunity for a tech-savvy professional to help foster a culture where compliance enables, rather than hinders, product development.

What you’ll be doing

• Implementation of critical projects:Deliver large-scale updates to processes and systems across multiple departments,such as Business Resilience and Risk Management
• Process translation:Act as a liaison between security/legal/compliance functions and other Rightmove Departments, translating GRC requirements into clear technical specifications, user stories, and actionable tickets
• Risk assessments & audits:Support internal and external audits,identify vulnerabilities, and collaborate with technical teams to implement appropriate controls
• Delivery support:Contribute to the Technology Risk strategy by rolling out frameworks, tracking metrics, and embedding automated compliance practices into workflows
• Process integration:Work closely with various teams to integrate compliance requirements into existing ways of working (e.g. Agile/Jira), ensuring a frictionless approach to GRC
• System resilience:Support due diligence on software, technical partners, and business continuity processes to strengthen system resilience

We’relooking for someone with

• Collaboration and communication:Strong interpersonal skills with the ability to work effectively across technical, compliance, and legal teams
• Project management fundamentals:Experience working in software environments, managing project life cycles and stakeholders
• Technical fluency:A solid understanding of modern technology teams and development processes, with the ability to translate complex compliance risks into developer-friendly language
• Pragmatic mindset:A problem-solving approach, balancing robust security requirements with efficient product delivery
• Process focus:Ability to understand technical workflows and design compliance processes that enhance rather than disrupt team efficiency

Whatyou’llbring to the role

• Demonstrable experience (typically 2–4 years) in a project management, GRC, or security-related role
• Familiarity with information security, privacy, or compliance-based projects
• Experience reporting to stakeholders at all levels of the business
• Familiarity with Agile tools (e.g. Jira) and embedding requirements into development backlogs
• A…