Governance, Risk and Compliance (GRC) Client Assurance Analyst
Position: Governance, Risk and Compliance (GRC) Client Assurance Analyst
Location: London (News Building)
Hybrid: Three days in office
The GRC Client Assurance Analyst will have a good understanding of information security and privacy principles as well as a sound understanding of regulatory and compliance requirements affecting a global business. In this role, you will support the Dow Jones Cyber GRC Program for News Corp along with the BISO and central GRC function. You will provide Dow Jones corporate customers with cyber‑related information that gives them confidence that our security policies and controls are reliable and meet industry standards. This role sits at the intersection of security, compliance, and customer trust; ensuring our customers have confidence in our risk posture while supporting sales, renewals, and audits.
What’s the role?
- Assist with security questionnaires, RFPs, and assessments from Dow Jones corporate customers to verify our organization’s security posture, often against tight deadlines.
- Respond to client inquiries related to SOC2, ISO27001, GDPR, risk management, and other security controls.
- Support Sales during enterprise deals, renewals, and escalations by providing security‑related information.
- Participate in customer meetings to share evidence of security controls.
- Maintain standardized responses, evidence, and customer‑facing security documentation.
- Collaborate frequently with Product, Technology, Legal, and other Cyber SMEs to gather accurate, timely information and validate responses.
- Track ownership, status, and deadlines for assurance deliverables to ensure on‑time completion.
- Track and manage control gaps, risks, and remediation efforts.
- Support implementation of key security initiatives across the organization.
- Assist in the development and maintenance of effective measurement and simplified reporting for the Client Assurance program.
- Assist with additional cyber‑related projects as needed.
Who are you?
- 3+ years’ experience within Cyber Security or related fields.
- Experience in a B2B SaaS or cloud‑native environment.
- Demonstrated experience working in a highly cross‑functional environment.
- Strong knowledge of and experience with industry frameworks and standards such as NIST CSF and ISO 27001.
- Knowledge of Dow Jones B2B products (Risk & Compliance, Factiva, Newsplus) is a bonus.
- Good working knowledge of cloud infrastructure, preferably AWS.
- Strong oral and written communication skills with the ability to translate technical security concepts into clear, customer‑friendly language.
- Qualification in Information Security, Computer Science, Engineering or similar.
- Professional security certifications such as CISSP, CISM, CISA, CRISC or similar are preferred.
Equal Opportunity Employer
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status or any other protected characteristic.
#J-18808-Ljbffr…