UK remote
Junior GRC Analyst
About this role
The Role: We are seeking a Technology GRC Analyst to support the continued development of Frasers Group's technology risk and assurance capability. In this role, you will identify, assess and monitor technology and cyber risks while providing assurance that key IT and business controls are designed and operating effectively. Working closely with Technology, Cyber Security, Internal Audit, Finance, Supply Chain and business stakeholders, you will help strengthen governance, improve operational resilience and ensure risks are managed in line with industry standards and regulatory requirements.
You will play an important role in delivering technology risk assessments, controls testing, identity and access assurance, third-party governance and supply chain assurance activities across the Group, helping to embed a proactive risk culture that supports Frasers Group's continued growth. Key Responsibilities: Deliver technology and cyber risk assessments across enterprise infrastructure, cloud platforms, retail systems, digital applications and strategic technology initiatives.
Perform controls testing across IT General Controls (ITGCs), automated application controls and key operational processes to provide assurance over the effectiveness of the Group's control environment. Conduct Identity and Access Management (IAM) assurance activities, including user access reviews, privileged access audits, Joiner-Mover-Leaver (JML) controls and Segregation of Duties (SoD) assessments. Support identity audits to ensure access to business-critical systems remains appropriate, compliant and aligned with security policies.
Maintain the Technology Risk Register, ensuring risks, remediation actions and control improvements are accurately tracked and reported. Perform supplier and third-party technology risk assessments, supporting ongoing assurance over strategic technology partners and service providers. Support Supply Chain Assurance by assessing technology and operational risks across logistics, warehousing, distribution centres and supplier ecosystems.
Partner with Internal Audit, Internal Controls and Cyber Security teams to coordinate audits, evidence gathering and remediation activities. Produce meaningful risk dashboards, management information, Key Risk Indicators (KRIs) and governance reporting for senior leadership and risk forums. Collaborate with Technology, Retail Operations, Finance, Procurement, Legal and Supply Chain teams to embed effective risk management and assurance practices across the business.