{"id":114582,"url":"https://alion.io/job/quartz-grc-senior-analyst","title":"GRC Senior Analyst","company":{"id":25378,"name":"Quartz","domain":"quartz.ai","url":"https://alion.io/company/quartz-ai","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Recruitee","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":89000,"max_usd":163000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":32},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-08-05T11:36:19Z","employer_posted_date":"2026-08-05","last_verified_at":"2026-10-17T11:55:56Z","board_verified":true,"closed_at":null,"days_open":73,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":73},"description":"Summary\nWe are seeking a Senior GRC Analyst to help drive the evolution of our governance, risk and compliance capability from periodic assessment towards continuous, measurable assurance that directly informs business and technology decision making. The role spans both our internal technology initiatives and practical GRC support to our client base.\nYou will work closely with the teams that build and operate our technology estate, developing sufficient understanding of those environments to assess risk credibly and translate it into a risk position that leadership can act upon. You will concisely articulate your ideas to stakeholders at all levels and influence outcomes in support of enterprise projects.\nYou will be confident working across the major information security frameworks and standards, including ISO 27001, NIST and SOC 2, and able to shape risk, compliance and control decisions in a way that keeps both us and our clients secure without slowing the business down.\nWe are actively modernising the way assurance is delivered, with particular emphasis on automation and the practical application of AI to improve control efficacy and reduce manual effort. This role will be central to that work, and we are looking for a practitioner motivated by evolving how GRC is delivered rather than by maintaining existing processes through traditional methods.\nIf you have a positive mindset and can map risk to business value with a practical, adaptable and innovative approach, then this is the role for you.\nKey Responsibilities\nRisk Management: Work closely with technology teams and clients to develop an accurate and current understanding of the risk picture, and articulate and report on it consistently and effectively to both technical and executive audiences.\n\nFramework Implementation: Plan, implement and maintain a security program aligned to CIS Controls v8 and other framework requirements in a manner appropriate to the environment, taking a practical and proportionate approach.\n\nInternal and Client Delivery: Provide security subject matter expertise across our internal technology initiatives, collaborating with project managers, business stakeholders and operational teams, and lead client GRC engagements end to end from gap assessment and framework implementation through to audit readiness and ongoing advisory.\n\nMeasurement and Insight: Maintain a clear and current view of control effectiveness, risk trends and remediation progress, underpinned by tangible data points, and use it to inform business and technology planning decisions.\n\nAudit and Assurance: Plan and conduct internal and external compliance audits, coordinating with the wider Information Security function and external partners, and pursue remediation through to demonstrable risk reduction.\n\nAutomation and AI: Identify assurance activity that is manual, repetitive or inefficient and lead the work to improve it, engaging technical teams and tooling to deliver measurable improvements in control efficacy and analyst capacity.\n\nCore GRC Services: Contribute to and mature the core services we provide, including third-party risk management, the policy and standards framework, and security awareness and training content, making each scalable, measurable and automated wherever practical.\n\nFunction Development: Support the development of the wider Information Security function, evolving ways of working to solve problems in a collaborative environment.\n\nRequirements\nEssential Experience and Capability\nRelevant experience in a comparable role across information security governance, risk management, compliance and audit, with a demonstrable track record of delivered outcomes.\n\nPractical implementation experience with CIS Controls, ISO 27001 or equivalent frameworks within live operating environments, including the judgement required to apply them proportionately.\n\nSufficient technical understanding to engage credibly with operational IT teams across a range of security domains including identity, networks, vulnerability management and configuration hardening. Prior experience in a technical role is not essential, but a sound grasp of how modern technology environments are built and operated is.\n\nAn active interest in AI and automation technologies in the context of a ‘GRC Engineering’ mindset.\n\nA risk-based mindset, prioritising on the basis of evidence and impact, with reporting produced to support decisions rather than to record activity.\n\nThe ability to prioritise a complex and evolving workload against available capacity, and to communicate the impact of change clearly with smart escalations.\n\nThe confidence to identify opportunities, influence change and challenge constructively at all levels whilst building positive relationships with key business stakeholders and operational leads.\n\nWillingness to travel internationally for business on occasion.\n\nDesirable\nPractical experience of introducing AI and automation into GRC processes.\n\nCertification in one or more of CISA, CRISC, CISSP, CISM, CGE-P, ISO 27001 Lead Auditor or Lead Implementer.\n\nThe above list of duties is not exclusive or exhaustive and the post holder will be required to undertake tasks that are reasonably expected within the scope and grading of the post.","description_format":"text","description_chars":5268,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Wealth Management & Financial Advisors","Investing Apps & Robo-Advisors"],"lifecycle":[{"event":"open","at":"2026-08-05T11:36:19Z"}],"visa":[],"liveness":{"score":27,"band":"fade","label":"Fading","p_open":1,"p_active":0.608,"p_room":0.44,"age_days":72,"expected_fill_days":57,"reasons":["conf:4","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/quartz-grc-senior-analyst","json_url":"https://alion.io/job/quartz-grc-senior-analyst.json","meta":{"generated_at":"2026-10-17T12:18:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16294,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":25378},"rest":"https://alion.io/mcp/rest/get_company?id=25378"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fquartz-grc-senior-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fquartz-grc-senior-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fquartz-grc-senior-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/quartz-grc-senior-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fquartz-grc-senior-analyst"}]}