Future Tech Jobs Future Tech Jobs

GRC Analyst - Data Protection and GDPR

HAYS Specialist Recruitment
B31Jp, B3 1JP, United Kingdom
2 weeks ago
£45,000 – £50,000 pa

Salary

£45,000 – £50,000 pa

Job Type
Contract
Work Location
Hybrid
Seniority
Mid
Education
Degree
Posted
18 May 2026 (2 weeks ago)

Benefits

Company discounts Pension contribution matched at 1.5x, up to 5% Private healthcare Dental plan Cycle to work Keep-fit schemes 26 days annual leave plus bank holidays
Share
Save job
Create job alert

GRC Analyst - Data Protection & GDPR

Fixed Term Contract, 12 months - £45k - £50k

Location: Hybrid - Birmingham


Your new company:


I am looking to recruit a GRC Analyst, focusing on Data Protection and GDPR, to join a leader in the hospitality space, with the role focusing on GRC activities, with a strong focus on information security, privacy, and regulatory assurance across the organisation.


The role responsibilities:


This role focusses on data protection assurance and GDPR compliance, ensuring personal data is processed lawfully, and in line with regulatory and organisational requirements. Key parts of the role:

  • Reviewing how personal data is used across systems, business processes, and technology solutions.
  • Identifying opportunities to reduce, anonymise, or eliminate personal data processing where it is not essential to business needs.
  • Support the review, development, and rollout of information security and data protection policies.
  • Contribute to the management of information security, third party, and privacy risk registers.
  • Assist with internal and external audits, including GDPR assurance, PCI DSS, and financial audits.
  • Track remediation of identified security, privacy, and compliance issues to ensure timely closure.
  • Support incident and breach response activities, including investigation, documentation, and follow-up actions.


You will need:

  • Strong understanding of GDPR, the UK Data Protection Act, and privacy and security control requirements.
  • Experience working in GRC, information security, data protection, supplier assurance, or a related compliance role.
  • Ability to interpret and assess technical and organisational controls.
  • Strong analytical skills with excellent attention to detail.
  • Confident written and verbal communication skills, able to engage across legal, technical, and operational teams.
  • Experience contributing to incident or breach investigations.
  • Ability to manage multiple competing priorities and constructively challenge established processes.
  • Minimum 3 years' experience in a relevant role.
  • CIPP/E, CIPM, CompTIA Security+, or BCS Practitioner Certificate in Data Protection, desirable.


What you'll get in return:

  • Salary of between £45k-£50k
  • Hybrid working
  • Company discounts
  • A pension contribution matched at 1.5x, up to 5%.
  • Private healthcare, dental plan, cycle to work, and keep-fit schemes.
  • 26 days annual leave plus bank holidays.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk

Related Jobs

View all jobs

GRC Analyst

VIQU IT Recruitment London, United Kingdom
£50,000 – £55,000 pa Hybrid

Information Security GRC Analyst

GEDU London, United Kingdom
£40,000 – £42,500 pa On-site

Cyber Security Analyst - Fridays Off

eTech Partners London, United Kingdom
£65,000 – £70,000 pa Hybrid

Cyber Security Analyst - 1 day a week - Remote

eTech Partners London, United Kingdom
£65,000 – £70,000 pa On-site

Cyber Security Analyst - Fridays Off

eTech Partners Nottingham, United Kingdom
£65,000 – £70,000 pa On-site

Cyber Security Analyst

Nextech Essex, United Kingdom
£40,000 – £60,000 pa Hybrid

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Products

Where to Advertise Cyber Security Jobs in the UK (2026 Guide)

Where to advertise cyber security jobs UK in 2026: the specialist boards, communities and channels that reach offensive, defensive and GRC security talent. The candidate pool is small, heavily vetted and in high demand across government, financial services, critical national infrastructure and the private sector simultaneously. Many of the strongest candidates hold active security clearances, are not actively job-searching through general platforms, and move primarily through specialist networks and trusted referrals. General job boards reach a broad audience but lack the specificity that security professionals expect. Specialist platforms, government-affiliated channels and cleared candidate networks each serve a different part of the market. This guide, published by CybersecurityJobs.tech, covers where to advertise cyber security roles in the UK in 2026, how the main platforms compare, what employers should expect to pay, and what the data says about hiring across different role types.

Jobs

Cyber Security Jobs UK 2026: What to Expect Over the Next 3 Years

Cyber Security Jobs UK 2026: roles, salaries and the threat intelligence, cloud security and zero-trust hiring trends shaping UK cyber careers. Cyber security is one of the few sectors where demand for talent has never once dipped. Every major technological shift of the past decade — cloud migration, remote working, AI adoption, the proliferation of connected devices — has expanded the attack surface that security professionals are expected to defend. And every expansion of that attack surface has generated more jobs. But the cyber security jobs market of 2026 is not simply a larger version of what it was three years ago. It is a structurally different market. The threats have evolved, the technologies used to combat them have changed, the regulatory environment has tightened considerably, and the roles being created reflect all of that. A job seeker who understands only the cyber security landscape of 2023 is already working with an outdated map. The candidates who will thrive over the next three years are those who understand where the sector is heading — which specialisms are attracting the most investment, which technologies are reshaping defensive and offensive security practice, and how the definition of a cyber security professional is broadening well beyond the traditional image of a network defender in a SOC. This article breaks down what the UK cyber security jobs market is likely to look like through to 2028 — covering the titles emerging right now, the technologies driving employer demand, the skills that will matter most, and how to position your career ahead of the curve.

🍪 Basic, anonymous analytics (aggregate counts only, never shared) are always on. Accept to also enable third-party tools — Google Analytics, Microsoft Clarity, Mixpanel, Leadfeeder — which help us match you with relevant Cyber Security roles. We never sell your data or use it for cross-site advertising. See our Cookie Policy.