Job reference 338710
Senior Governance Analyst
Competitive salary plus car allowance, healthcare, 18% annual bonus potential, 25 days annual leave plus bank holidays rising with service and a company pension scheme with highly competitive contribution rates.
Permanent, Full time
Hybrid working in London or Sheffield office x3 days a week
Shape the future of Cyber Security at RMG
RMG is strengthening its cyber security capability and we’re looking for a Senior Cyber Governance Analyst to play a pivotal role in protecting our organisation, our customers, and our data. This is a high‑impact position for someone who thrives on responsibility, influence, and the opportunity to drive meaningful change across a complex business.
The role
- Lead Cyber Governance Frameworks: Drive the deployment and ongoing adherence to key standards including Cyber Essentials, ISO 27001, NIST, GDPR and other relevant frameworks.
- Risk Management: Support the identification, assessment, and mitigation of cyber risks, ensuring risks are documented, monitored, and effectively managed.
- Policy & Standards Development: Own the creation, review, and enhancement of cyber security policies, standards, and guidelines aligned to regulatory requirements and organisational objectives.
- Compliance Monitoring & Audit: Conduct regular assessments, maintain certifications, and lead internal/external audit activity, ensuring the business meets all cyber and information security obligations.
- Metrics & Reporting: Produce meaningful dashboards and reports that track governance effectiveness and provide clear insights to senior stakeholders.
- Cross‑Functional Collaboration: Partner with IT, Legal, Risk, Procurement, Sales, and business change teams to embed cyber governance into business processes and decision‑making.
- Continuous Improvement: Identify gaps, drive enhancements, and champion initiatives that uplift cyber maturity across RMG and its subsidiaries.
- Third‑Party Cyber Risk Management: Assess and manage supply chain cyber risks, conducting assurance checks and guiding business owners on supplier risk decisions.
- Customer Assurance: Act as a subject matter expert, providing high‑quality responses to customer cyber assurance requests and representing RMG’s security posture externally.
Your Experience
- A cyber‑related qualification (e.g., CISM, CISSP, CRISC, CGEIT, ISO 27001 Lead Auditor) or working towards one.
- 3–5 years’ experience in cyber governance, risk, and compliance within a large or complex organisation.
- Strong knowledge of frameworks such as ISO 27001, NIST, GDPR, SOX, CAF, NCSC guidance, and Cyber Essentials.
- Familiarity with cyber security tools, risk methodologies, and audit processes.
- Excellent communication skills, able to translate complex concepts for technical and non‑technical audiences.
- High attention to detail, particularly in policy development and compliance documentation.
- Strong analytical and problem‑solving skills.
- Proven ability to influence stakeholders, build trust, and work collaboratively across teams.
Why join RMG?
- Work at the heart of a business where cyber security is a strategic priority.
- Influence senior stakeholders and shape organisation‑wide security practices.
- Be part of a supportive, growing cyber function with opportunities for development.
Extra Benefits
- Family friendly support – enhanced maternity pay, paternity leave, adoption leave and shared parental leave.
- Supportive and generous company sick pay.
- Funded Dental – As a manager you are eligible to a level of employer funded dental insurance.
- Health Assessment – As a manager you are eligible to an employer funded health assessment every 2 years.
- Benefits Account – Access to a personal benefits account on the ‘My Bundle+’ platform with over 800 retail offers.
- Your Wellbeing – 24/7 access to services and tools for physical, mental, financial, and social support.
Next Steps
The next stage of the selection process will be a face‑to‑face/virtual interview consisting of competency‑based and role specific questions.
Royal Mail Group is committed to inclusion and welcoming applications from all individuals. We are a Gold signatory to the Armed Forces Covenant and encourage applications from ex‑Armed Forces personnel, reservists, veterans, cadet instructors, and military spouses/partners.
#J-18808-Ljbffr