Analyst, Information Security GRC
Location: Manchester, UK | Work Arrangement: Hybrid | Department: Information Security
About the Role
Fitch is seeking an Information Security GRC Analyst to support the delivery and ongoing development of its Cyber Security Awareness and Education program. This role helps employees understand cyber risks and build secure working habits through engaging communications, training, phishing simulation activities, campaigns, reporting, and program administration.
This is an excellent opportunity for someone early in their cyber security, communications, learning and development, risk management, or employee engagement career who is interested in the human side of cyber security. The successful candidate will work closely with Information Security, Employee Communications, Learning and Development, Technology, HR, and business stakeholders to make security guidance clear, practical, and relevant for employees across a global organization.
Responsibilities:
-
Support the planning, coordination, and delivery of cyber security awareness campaigns, including Cyber Security Awareness Month and targeted awareness initiatives throughout the year.
-
Support awareness communications such as newsletters, articles, email campaigns, intranet posts, manager updates, event invitations, and reminder messages.
-
Translate technical cyber security topics into clear, accessible, and employee-friendly messaging.
-
Support the security awareness training lifecycle, including content updates, testing, launch coordination, completion tracking, reminders, and evidence retention.
-
Assist with targeted, role-based, regional, and regulatory training activities, including stakeholder reviews, approvals, and supporting documentation.
-
Support phishing simulation campaigns, including preparation, testing, audience coordination, communications, reporting, and post-campaign follow-up.
-
Compile and maintain program metrics, including training completion, campaign engagement, phishing simulation outcomes, reporting rates, and communication performance.
-
Support the preparation of dashboards, leadership updates, meeting materials, and program reports.
-
Maintain organized records of approvals, communications, process documentation, evidence, and supporting materials.
-
Coordinate with stakeholders across Information Security, Technology, Communications, HR, Learning and Development, Facilities, and business teams.
-
Assist with virtual and in-person awareness events, including speaker coordination, event briefs, calendar invites, promotional materials, volunteer coordination, and post-event follow-up.
Qualifications:
-
Experience in cyber security awareness, human risk, training, communications, and employee education.
-
Strong written communication skills, with the ability to make complex topics clear, simple, and engaging.
-
Good attention to detail and the ability to manage multiple tasks, deadlines, and stakeholders.
-
Strong organizational skills and confidence maintaining trackers, documentation, and structured records.
-
Ability to work collaboratively with technical and non-technical colleagues across different teams and regions.
-
Comfortable using Microsoft Office tools, including Word, PowerPoint, Excel, Outlook, Teams, and SharePoint.
-
Willingness to learn about phishing, social engineering, data protection, identity and access management, secure working practices, AI-related risks, and emerging cyber threats.
-
Ability to handle sensitive information responsibly and maintain confidentiality.
-
A proactive, curious, and improvement-focused mindset.
Preferred Experience:
-
Experience with cyber security awareness programs, phishing simulations, security training platforms, employee engagement campaigns.
-
Experience drafting internal communications, newsletters, articles, presentations, training materials.
-
Experience coordinating campaigns, events, workshops, stakeholder reviews, approval processes.
-
Familiarity with reporting metrics and dashboards.
-
Basic understanding of cyber security topics such as password security, multi-factor authentication, data handling, AI-related risks, and incident management.
-
Experience working in a regulated, financial services, professional services, or global corporate environment.
What We Offer:
You will have the opportunity to contribute to a global cyber security awareness program, work with stakeholders across the business, and develop practical experience in cyber security, communications, training, reporting, and human risk management.
Why Choose Fitch:
- Hybrid Work Environment: On-site presence required two days per week.
- A Culture of Learning & Mobility: Access to dedicated training, leadership development, and mentorship programs to support continuous learning.
- Investing in Your Future: Retirement planning and tuition reimbursement programs to help you meet your short- and long-term goals.
- Promoting Health & Wellbeing: Comprehensive healthcare offerings that support physical, mental, financial, social, and occupational wellbeing.
- Supportive Parenting Policies: Family-friendly policies, including a generous global parental leave plan, designed to help you balance work and family life.
- Inclusive Work Environment: A collaborative workplace where all voices are valued, supported by Employee Resource Groups that unite and empower colleagues worldwide.
- Dedication to Giving Back: Paid volunteer days, matched donation programs, and ample opportunities to volunteer in your community.
Fitch is committed to providing global securities markets with objective, timely, independent and forward-looking credit opinions. To protect Fitch’s credibility and reputation, our employees must take every precaution to avoid conflicts of interest or any appearance of a conflict of interest. Should you be successful in the recruitment process at Fitch Ratings you will be asked to declare any securities holdings and other potential conflicts prior to commencing employment. If you, or your immediate family, have any holdings that may conflict with your work responsibilities, you may be asked to divest yourself of them before beginning work.
Fitch is proud to be an Equal Opportunity and Affirmative Action Employer. We evaluatequalified applicants without regard to race, color, national origin, religion, sex, sexual orientation, gender identity, disability, protected veteran status, and other statuses protected by law.
£80k - £90k per annum
...and driving informed decision-making across senior business and technology leaders without direct authority • Strong commercial awareness and judgement, with the ability to balance business value, cost, risk and operational considerations when shaping technology...SuggestedLong-term contractHybrid workingOn-site£40k per annum
..., simple and consistent. As our CX Improvement & Implementation Analyst, you will help deliver commercial projects, customer experience... ...issues, build the case for change and measure outcomes. • Commercial awareness of how pricing, products and propositions affect customers and...SuggestedLong-term contract- £41k - £56k per annumEstimated...Security set-up and support of audits Management of user documentation and training materials Report management and stakeholder awareness Implementation of mass data requests using EIBs Following the governance and change control processes Complex query...SuggestedFull-time
- £52k - £73k per annumEstimated...networks, endpoints and cloud services, supporting operational resilience and business continuity. ~ Promote information security awareness across the UK business, helping colleagues understand and adopt secure ways of working. ~ Be devoted to the FCA principle of...SuggestedFull-timeNo agencyOn-site
£58k - £61k per annum
...security compliance schedule Notify and manage escalations and ensure reporting is accurate and Input into security communication, awareness, and training for colleagues. Ideally you will have as much of the following as possible: ISO27001 audit experience Background...SuggestedHybrid working£450 per day
...frameworks including STRIDE and MITRE ATT&CK Strong understanding of cybersecurity domains across endpoint, network, cryptography, information management, and IAM in enterprise environments Awareness of industry security standards including ISO 27001, NIST, PCI DSS,...Hybrid working- £46k - £61k per annumEstimatedAt CGI, you'll help organisations strengthen their resilience against an evolving cyber threat landscape while delivering meaningful outcomes for some of the UK's most critical organisations. Working alongside one of the UK's largest cyber security consultancies, you'll tackle...Long-term contractHybrid working
- £57k - £76k per annumEstimated...capabilities for mobile applications. Practical working knowledge of cryptography used for protecting data and network communications Awareness of mobile threat landscape such as malware and remote access Experience with developing security integrations by interacting with...16 hoursFull-timeHybrid workingOn-siteRemoteFlexible hours
£85k - £90k per annum
...stakeholders, providing security direction and guidance. Strong documentation skills for security designs, policies, and procedures. Cybersecurity Tooling – Familiarity with security tools and technologies. Azure Cloud or other cloud technology Any experience in working...Hybrid working- ...global technology business. Who we're looking for We're seeking a proven senior professional with the technical depth, commercial awareness and leadership capability to operate confidently at this level. You'll likely bring: A minimum of 7 years' experience in...Summer workFlexible hoursWeekend workAfternoon shift
£80k - £100k per annum
Looking for a role with plenty of growth opportunities? Join a global professional services organization with decades of experience delivering complex infrastructure, advanced technologies, and critical systems across a diverse range of industries. Working on projects that...Long-term contractPermanentHybrid workingOn-siteFlexible hours- £55k - £76k per annumEstimatedAt Capgemini Invent, we believe difference drives change. As inventive transformation consultants, we blend our strategic, creative and scientific capabilities, collaborating closely with clients to deliver cutting-edge solutions. We create transformation tailored to our client...Full-timeHybrid workingOn-siteFlexible hours
- £37k - £48k per annumEstimated...producing post-exercise recommendations. Work closely with SIOC analysts, security engineers, cloud specialists and wider Managed... ...new standards with technology solutions across cloud services, cybersecurity, data and AI, ensuring that every investment advances our commitment...Full-time
£80k - £88k per annum
Lead Security Architect - North West Based - Onsite with some Hybrid working. As the Lead Security Architect you will develop the enterprise security architecture function supporting policies, guidance in support of the Information and cyber-physical security strategy, ensuring...Hybrid working£50k - £52k per annum
Senior Network Analyst / Network Security Analyst / Network Engineer- Cisco – Hybrid working – 52k plus bonus & excellent benefits. Senior Network Analyst (Cisco) for our client who are a multinational business with an enterprise level network. We are looking for a Network...Hybrid working- £55k - £75k per annumEstimatedStarling is the UK’s first and leading digital bank on a mission to fix banking! We built a new kind of bank because we knew technology had the power to help people save, spend and manage their money in a new and transformative way. Read more about Our Story here. We’re...16 hoursFull-timeHybrid workingOn-siteFlexible hours
- £56k - £78k per annumEstimatedIn this role, you won't be confined to traditional 4+1 web applications. We've broken away from the constraints of CHECK or CE+ standards, and we're not interested in producing lengthy PDF reports. Instead, our focus is on seamlessly integrating continuous penetration testing...Full-timeHybrid workingFlexible hours
- £48k - £63k per annumEstimated.... You'll combine technical expertise with a practical, risk-aware approach, helping embed security into the way we design, deliver... ...delivery. Contribute to continuous improvement of cybersecurity risk management processes, helping to enhance maturity across the...Long-term contractFull-timeSummer workCasual workHybrid workingOn-site
£57.5k per annum
...infrastructure (preferably AWS), including Infrastructure as Code, automated software delivery, and CI/CD practices. Security & Operational Awareness - Understanding of secure engineering principles, including APIs, authentication, access control, secrets management, monitoring,...PermanentFull-timeHybrid workingFlexible hours- £28k - £38k per annumEstimatedJob brief Are you a tech-savvy engineer who loves solving complex problems and working with cutting-edge IoT technology? Our client is a global innovator in smart physical security and IoT solutions, where seamless hardware-software integration is a core competitive...Remote job
- £47k - £63k per annumEstimatedCompany Description Turner & Townsend is a global professional services company with over 22,000 people in more than 60 countries. Working with our clients across real estate, infrastructure, energy and natural resources, we transform together delivering outcomes that...Full-timeHybrid workingNo agencyFlexible hours
- £50k - £69k per annumEstimated...content and data processing and management, AI and machine learning services, master and reference data, graph and search, APIs, internal analyst and customer-facing portals, and direct-to-customer data delivery. This role suits a hands-on individual contributor who is...Full-timePart-timeHybrid workingFlexible hours
- £42k - £58k per annumEstimated...development lifecycle, contributing to the development, testing and enhancement of applications and platforms. Technical Business Analyst Bridge the gap between business and technology teams. You'll gather requirements, analyse processes, support solution design and help...Long-term contractFull-time5 days/week
- £52k - £72k per annumEstimated...UBDS Group our mission is to support entrepreneurs who are setting new standards with technology solutions across cloud services, cybersecurity, data and AI, ensuring that every investment advances our commitment to innovation, making a difference, and creating impactful solutions...Hybrid working
- £31k - £43k per annumEstimated...realisation while maintaining high standards of governance and project controls throughout the project lifecycle. Applicants should be aware that this is a Hybrid role with on-site attendance required for stakeholder management, governance activities, workshops, and senior...Full-timeHybrid workingFlexible hours
- £43k - £55k per annumEstimatedJob Title: Naimuri - Information Security Officer Job Location: Salford Quays, Manchster Job Type: Permanent, Fulltime - onsite Job ID: 20594 The Mission: At Naimuri, we provide the tech that protects. As our...PermanentFull-timePart-timeHybrid workingOn-siteWork from homeFlexible hours
£45k - £50k per annum
...problem-solving skills with a practical approach to reducing cyber risk. Desirable Skills Microsoft Security Operations Analyst Associate certification. Microsoft Azure Security Engineer Associate certification. CompTIA Security+, CISSP, SSCP, or...PermanentHybrid workingOn-site- £73k - £101k per annumEstimatedThe Solution architect for Enterprise Modernization in Europe is a senior subject matter expert responsible for technical excellence, solution integrity, and capability development within the service line. This hands-on role leads high-impact client engagements, contributes...Hybrid working
- £37k - £50k per annumEstimatedCompany: SUDLOWS Job Type: Permanent, Full TimePermanentFull-time
£31k per annum
...join a multidisciplinary team of data scientists, software developers, cyber security specialists, SCADA engineers, network designers, analysts, and test & assurance professionals working on projects that genuinely matter. From supporting critical national infrastructure to...Hybrid workingImmediate startMonday to FridayFlexible hours
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Cybersecurity Awareness Analyst. Be the first to apply!
- IT security consultant 12 month contract day rate Manchester
- cyber security consultant Manchester
- information security consultant Manchester
- senior information security consultant Manchester
- cyber security advisor Manchester
- cyber security analyst Manchester
- cyber security sales Manchester
- director cyber security Manchester
- it cybersecurity specialist Manchester
- trainee cyber security Manchester

