Governance Risk & Compliance Analyst

Job Category : Information Security and Compliance

Requisition Number : GOVER
001843

Posted :
February 18, 2026

Full-Time

Remote

Showing 1 location

Remote, EMEA 00000, G

Title: Governance Risk and Compliance Analyst

Location: Remote - UK

About PSI

We are PSI Services. We power world leading tests. Delivered with trusted science and the very best test taker experience. PSI supports test-takers on their journey to pursuing dreams and gaining certifications that are important to them. They believe that their dreams are worth working for; that their dreams are worth the effort. And we believe that too. This is our core purpose, to empower people to achieve their dreams.

We do this by being the best provider of workforce solutions, which foster both technology and science to deliver the best solutions for our test takers.

We are searching for top talent to join our PSI team and help grow our products and services. We have a creative, supportive and inclusive culture where we empower people in their careers to be their authentic self and make the most of their great talent.

At PSI, we are committed to helping people meet their potential and we believe that promoting diversity, equity and inclusion is critical to our success. That’s why you’ll find these ideals are intrinsic to our company culture and applied throughout the employee lifecycle.

The Information Security, Governance, Risk and Compliance Analyst role works collaboratively with stakeholders across the business on various activities related to Quality, Environmental Sustainability, Business Continuity, Information Security and Privacy with the aim of ensuring compliance with ISO, SOC2, NIST, PCI and other industry standard frameworks.

This role will collaborate with process owners, internal auditors, external auditors, and other stakeholders in order to assist in reviewing, monitoring, and resolving findings.

This includes helping the team manage ISO
27001, SOC 2, ISO
14001, ISO
22301, ISO
9001 Compliance programs.

By supporting the implementation of internal and external assessments, responding to and managing the full lifecycle of compliance audits, and ensuring compliance with existing and emerging regulations and standards including SOC2, ISO 27001, NIST CSF, PCI, SOX, and other GRC activities, the GRC Analyst will also contribute to the transformation of the company’s compliance program.

This is a full time, permanent position, Monday to Friday with flexible hours around a standard . The role can be performed remotely, with occasional travel to offices and test centres globally to support with audits.

• Manage risk and vulnerability assessments, validation testing, compliance reviews, and audits in accordance with agreed standards.
• Manage and support internal and external audits
• Support the continuation of ISO 27001, ISO 9001, ISO 14001, ISO 22301, SOC2 and PCI certifications.
• Support the development and maintenance of the Global ISMS Management Committee, including governance related responsibilities.
• Maintain and monitor a central repository for audit evidence.
• Inform the proper stakeholders of important concerns and hazards
• Maintain up-to-date knowledge of procedures and methods that serve to broaden team knowledge and industry expertise
• Supporting the development, documentation and maintenance of policies, procedures, and standards across the organisation, ranging from Information Security and Data Protection to Quality Management and Environmental Management.
• Assist the department in responding to inquiries from the business units about ongoing operational compliance
• Be proactive in seeking out areas for improvement and offer insightful advice and value added guidance on process and control enhancements
• Share information with managers to avoid surprises, draw attention to problems, and guarantee delivery on time
• Champion Compliance by promoting and developing awareness of different security and compliance risks and best practices across the company.
• Assist with the development of GRC related newsletters and training.

• 2+ years of direct experience in Governance, Risk &…