Security Governance, Risk & Compliance (SGRC) Analyst

Job Purpose

The SGRC Analyst supports the delivery of RWS's Security Governance, Risk & Compliance programme by providing assurance, governance, risk management and compliance services across the organisation. The role acts as a key interface between Security, Technology, Product, Legal, Procurement and business stakeholders, helping the organisation identify and manage risk, maintain compliance obligations, support customer assurance activities and ensure third parties meet security expectations.

The position has primary responsibility for Third-Party Risk Management (TPRM), Internal Security Audit activities and Customer Assurance/RFP support, while contributing across broader SGRC programmes including risk management, policies, compliance, certifications and security governance and assurance activities relating to emerging technologies. 

About Product & Technology

Product & Technology plays a pivotal role in aligning the organization with its strategic objectives and enhancing shareholder value. Product & Technology is responsible for establishing unified standards and governance practices throughout the company. Additionally, we oversee the development and maintenance of core applications essential for the seamless operation of various functions across the organization. We are committed to driving and executing future roadmaps that are in line with the overall strategic direction of RWS. 

With a global reach, Product & Technology provides support services to over 7500 end users worldwide. We take pride in managing the information security operation and safeguarding all our assets. Our core functions encompass Enterprise & Technical Architecture, Network & Voice, Infrastructure, Service Delivery, Service Operations, Data & Analytics, Security & Quality Compliance, Transformation, Application Development, Enterprise Platforms, With a dedicated team of over 500 staff, Product & Technology ensures a strong presence across all regions, enabling efficient and effective support to our global operations.

Job Overview

Key Responsibilities

• Lead and support third-party security risk assessments for suppliers, partners and vendors.
• Evaluate security, privacy and compliance controls through questionnaires, certifications, audits and evidence reviews.
• Manage security risk registers, remediation plans and risk reporting activities.
• Support internal security audits, control assessments and external certification programmes.
• Coordinate evidence collection, stakeholder engagement and audit readiness activities.
• Respond to customer security due diligence requests, questionnaires and assurance reviews.
• Contribute to security sections of RFPs, RFIs and procurement responses.
• Maintain and improve security policies, standards, procedures and governance processes.
• Produce security metrics, dashboards and management reports to support decision-making.
• Support Information Security Management System (ISMS) activities and ongoing compliance initiatives.
• Assist with governance and risk management for emerging technologies, including AI.
• Help strengthen customer trust by demonstrating the organisation's security and compliance posture.

Key Deliverables

• Third-party risk assessments completed within agreed SLAs.
• Internal audit programme delivered to schedule.
• Timely responses to customer assurance requests and RFPs.
• Accurate maintenance of risk registers and audit findings.
• Evidence coordination for audits and certifications.
• Meaningful risk and compliance reporting for stakeholders.
• Continuous improvement recommendations for SGRC processes. 

Skills & Experience

• Experience in Information Security, Governance, Risk & Compliance (GRC), Security Assurance, or Audit functions.
• Understanding of third-party risk management and supplier assurance processes.
• Experience supporting audits, compliance reviews, and security assessments.
• Ability to respond to customer security questionnaires, due diligence requests, and RFPs.
• Strong documentation, report-writing, and reporting skills.
• Excellent stakeholder management skills, with the ability to work across technical and business teams.
• Strong organisational skills and ability to manage multiple priorities.
• Experience working with security frameworks, standards, and control-based assessments.
• Knowledge of security governance, risk management, and compliance best practices.
• Familiarity with industry standards such as ISO 27001, ISO 27002, ISO 27017, SOC 2, NIST CSF, CIS Controls, and Cyber Essentials.

Desirable

• Experience with GRC platforms, supplier risk management tools, or security assurance tooling is advantageous.
• Experience in a SaaS, technology, or global organisation environment is preferred.
• Understanding of privacy regulations and regulatory compliance requirements is desirable.

Success Measures (First 12 Months) 

• Supplier assurance activities operating efficiently and consistently.
• Positive stakeholder feedback on RFP and customer assurance support.
• Internal audit plan delivered on schedule.
• Audit findings tracked and remediated effectively.
• Improved visibility of SGRC metrics, risks and compliance status.
• Effective contribution to certification and assurance programmes.
• Demonstrable reduction in manual effort through SGRC process improvements. 

Life at RWS

Life at RWS - If you like the idea of working with smart people who are passionate about growing the value of ideas, data and content by making sure organizations are understood, then you’ll love life at RWS. 

Our purpose is to unlock global understanding. This means our work fundamentally recognizes the value of every language and culture. So, we celebrate difference, we are inclusive and believe that diversity makes us strong. We want every employee to grow as an individual and excel in their career. 

In return, we expect all our people to live by the values that unite us: to partner, putting clients fist and winning together, to pioneer, innovating fearlessly and leading with vision and courage, to progress, aiming high and growing through actions and to deliver, owning the outcome and building trust with our colleagues and clients.

RWS embraces DEI and promotes equal opportunity, we are an Equal Opportunity Employer and prohibit discrimination and harassment of any kind. RWS is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at RWS are based on business needs, job requirements and individual qualifications, without regard to race, religion, nationality, ethnicity, sex, age, disability, or sexual orientation. RWS will not tolerate discrimination based on any of these characteristics. 

RWS Values 

Get the 3Ps right – Partner, Pioneer, Progress – and we´ll Deliver together as RWS.

Recruitment Agencies: RWS Holdings PLC does not accept agency resumes.  Please do not forward any unsolicited resumes to any RWS employees.  Any unsolicited resume received will be treated as the property of RWS and Terms & Conditions associated with the use of such resume will be considered null and void.

#LI-AG1

#LI-Remote