GRC Analyst at Rhymetec

Prepare meeting agendas, reports and relevant documentation for client engagements.

Maintain regular communication with clients and lead meetings to discuss security and compliance requirements.

Configure and monitor performance alerts across cloud platforms such as AWS, Azure, GCP and Datadog.

Implement security monitoring tools, intrusion detection systems and supporting security applications across cloud environments.

Deploy and manage mobile device management solutions, including Jamf, Jump Cloud, Microsoft Endpoint Manager and Hexnode.

Configure and maintain compliance monitoring systems to ensure clients meet required security standards.

Conduct internal security audits, risk assessments, gap analyses and prepare detailed reports.

Organise incident response, business continuity and disaster recovery tabletop exercises with clients.

Help clients implement regulatory and security frameworks such as SOC 2 Type 2, ISO 27001, GDPR and DORA.

Carry out employee access reviews and assess the security practices of SaaS vendors.

Review and investigate bug reports and vulnerability disclosures submitted by security researchers.

Complete security questionnaires and prepare information security policies and supporting documentation for clients.

Collect, organise and maintain evidence required for compliance assessments.

Coordinate audit engagements and communicate with external auditors on behalf of clients.

Guide clients’ employees on security procedures, compliance requirements and cybersecurity best practices.

Strong understanding of cybersecurity, information security and regulatory compliance frameworks, including PCI, ISO/IEC, SOC 2, DORA and GDPR.

Practical knowledge of cloud security and infrastructure protection.

Familiarity with AWS, Google Cloud Platform (GCP) and Microsoft Azure environments.

Understanding of security control integration through Dev Ops practices and Infrastructure as a Service (IaaS).

At least 3 years of professional experience in technology or cybersecurity.

Bachelor’s degree in technology, cybersecurity or a related discipline, or equivalent practical experience.

Strong customer service skills and the ability to build and maintain professional client relationships.

Excellent communication, analytical and problem-solving abilities.

Ability to adapt to changing responsibilities, business needs and emerging technologies.

Willingness to travel for up to two weeks within a calendar year.

Job Title:

GRC Analyst

Employer:

Rhymetec

Job Type: Remote

Location:

United Kingdom

Salary/Rate: £35k – £40k / year

UK Visa Sponsorship:
Not Available

• Comprehensive private medical insurance fully funded by the company.
• Dental and vision insurance coverage.
• Generous annual leave allowance.
• Additional paid sick leave.
• Eight paid public holidays.
• Workplace pension scheme.
• Annual Talkspace subscription providing access to online counselling and mental health support.