IT Governance, Risk & Compliance Analyst

Overview

In this entry-level GRC role at Plexus, you will support the design and monitoring of IT policies, risk frameworks, and security compliance. You’ll serve as a bridge between technical and business teams to reinforce governance across enterprise IT and manufacturing tech environments. You will gain hands-on exposure to audits, risk management, and regulatory changes in a fast-growing, values-driven company. This is a chance to develop in a cross-functional, impact-focused setting that blends IT with regulatory awareness.

Pay / Benefits

• Private medical insurance
• Employee Assistance Program
• Enhanced pension contributions
• Life assurance
• Cycle to Work and electric vehicle schemes
• 33 days annual leave

Responsibilities

• Audit & Evidence Coordination: collect and evaluate audit evidence against ISO 27001, Cyber Essentials, and NIST CSF.
• Risk & Control Management: maintain the Risk Register, perform control testing, monitor non-compliance, and assist with third-party risk assessments.
• Policy & Framework Support: draft, update and review internal IT policies to align with standards and UK regulations.
• Research & Advisory: track evolving regulatory changes and assess business impact.
• Cross-Functional Collaboration: work with technical and business stakeholders to promote security best practices and keep the GRC platform updated.

Key requirements

• IT background (support, helpdesk, or operations)
• Foundational knowledge of IT environments and operational concepts (IAM, backups, basic networking)
• Basic understanding of security standards (ISO 27001, Cyber Essentials)
• Analytical problem-solving ability
• Strong written and verbal communication skills
• Curiosity and drive to learn new security frameworks and standards

• Curiosity
• Communication
• Resilience
• ISO 27001
• Cyber Essentials
• NIST CSF

…