Security Governance, Risk & Compliance (SGRC) Analyst

The SGRC Analyst supports the delivery of RWS's Security Governance, Risk & Compliance programme by providing assurance, governance, risk management and compliance services across the organisation. The role acts as a key interface between Security, Technology, Product, Legal, Procurement and business stakeholders, helping the organisation identify and manage risk, maintain compliance obligations, support customer assurance activities and ensure third parties meet security expectations.

The position has primary responsibility for Third-Party Risk Management (TPRM), Internal Security Audit activities and Customer Assurance/RFP support, while contributing across broader SGRC programmes including risk management, policies, compliance, certifications and security governance and assurance activities relating to emerging technologies. 

Product & Technology plays a pivotal role in aligning the organization with its strategic objectives and enhancing shareholder value. Product & Technology is responsible for establishing unified standards and governance practices throughout the company. Additionally, we oversee the development and maintenance of core applications essential for the seamless operation of various functions across the organization. We are committed to driving and executing future roadmaps that are in line with the overall strategic direction of RWS. 

With a global reach, Product & Technology provides support services to over 7500 end users worldwide. We take pride in managing the information security operation and safeguarding all our assets. Our core functions encompass Enterprise & Technical Architecture, Network & Voice, Infrastructure, Service Delivery, Service Operations, Data & Analytics, Security & Quality Compliance, Transformation, Application Development, Enterprise Platforms, With a dedicated team of over 500 staff, Product & Technology ensures a strong presence across all regions, enabling efficient and effective support to our global operations.

• →Lead and support third-party security risk assessments for suppliers, partners and vendors.
• →Evaluate security, privacy and compliance controls through questionnaires, certifications, audits and evidence reviews.
• →Manage security risk registers, remediation plans and risk reporting activities.
• →Support internal security audits, control assessments and external certification programmes.
• →Coordinate evidence collection, stakeholder engagement and audit readiness activities.
• →Respond to customer security due diligence requests, questionnaires and assurance reviews.
• →Contribute to security sections of RFPs, RFIs and procurement responses.
• →Maintain and improve security policies, standards, procedures and governance processes.
• →Produce security metrics, dashboards and management reports to support decision-making.
• →Support Information Security Management System (ISMS) activities and ongoing compliance initiatives.
• →Assist with governance and risk management for emerging technologies, including AI.
• →Help strengthen customer trust by demonstrating the organisation's security and compliance posture.

• Third-party risk assessments completed within agreed SLAs.
• Internal audit programme delivered to schedule.
• Timely responses to customer assurance requests and RFPs.
• Accurate maintenance of risk registers and audit findings.
• Evidence coordination for audits and certifications.
• Meaningful risk and compliance reporting for stakeholders.
• Continuous improvement recommendations for SGRC processes. 

• Experience in Information Security, Governance, Risk & Compliance (GRC), Security Assurance, or Audit functions.
• Understanding of third-party risk management and supplier assurance processes.
• Experience supporting audits, compliance reviews, and security assessments.
• Ability to respond to customer security questionnaires, due diligence requests, and RFPs.
• Strong documentation, report-writing, and reporting skills.
• Excellent stakeholder management skills, with the ability to work across technical and business teams.
• Strong organisational skills and ability to manage multiple priorities.
• Experience working with security frameworks, standards, and control-based assessments.
• Knowledge of security governance, risk management, and compliance best practices.
• Familiarity with industry standards such as ISO 27001, ISO 27002, ISO 27017, SOC 2, NIST CSF, CIS Controls, and Cyber Essentials.

Get the 3Ps right – Partner, Pioneer, Progress – and we´ll Deliver together as RWS.

Recruitment Agencies: RWS Holdings PLC does not accept agency resumes.  Please do not forward any unsolicited resumes to any RWS employees.  Any unsolicited resume received will be treated as the property of RWS and Terms & Conditions associated with the use of such resume will be considered null and void.

#LI-AG1

#LI-Remote

• Experience with GRC platforms, supplier risk management tools, or security assurance tooling is advantageous.
• Experience in a SaaS, technology, or global organisation environment is preferred.
• Understanding of privacy regulations and regulatory compliance requirements is desirable.

• Supplier assurance activities operating efficiently and consistently.
• Positive stakeholder feedback on RFP and customer assurance support.
• Internal audit plan delivered on schedule.
• Audit findings tracked and remediated effectively.
• Improved visibility of SGRC metrics, risks and compliance status.
• Effective contribution to certification and assurance programmes.
• Demonstrable reduction in manual effort through SGRC process improvements.