GRC Analyst

Primer is looking for a GRC Analyst to take ownership of its Governance, Risk & Compliance program. The role involves maintaining a year-round evidence calendar, running continuous control monitoring, and coordinating with external auditors. The ideal candidate will have 3-5 years of experience in GRC, compliance, or information security governance, hands-on experience with external audits, and familiarity with EU regulatory frameworks such as GDPR, DORA, NIS2, and the EU AI Act.

Requirements

• Experience in GRC, compliance, or information security governance
• Hands-on experience coordinating external audits (SOC 2, PCI DSS, ISO 27001, or similar)
• Familiarity with EU regulatory frameworks such as GDPR, DORA, NIS2, and the EU AI Act
• Experience managing vendor risk assessments and third-party due diligence
• Track record of maintaining evidence and controls on a continuous (not just annual) basis

Benefits

• Competitive share options
• Uncapped holiday, with 25 days minimum to be taken
• Co-working space access
• Workations & Company Retreat
• The best equipment for your role
• £500 towards your home office setup
• Generous learning budget
• Private Medical Insurance
• A broad set of additional perks and benefits (depending on location)