Senior Governance, Risk and Compliance Analyst

Overview

As part of Arup’s Digital Technology Cyber GRC team, you will strengthen IT disaster recovery and BCM across a global environment. You will lead DR planning, risk and BIA analyses, and security-awareness initiatives to boost resilience while enabling business objectives. You’ll collaborate with regional teams to embed security-by-design in projects and drive ISO 22301 compliance. This role offers meaningful work with a purpose-driven organisation and global impact.

Pay / Benefits

• profit share
• private medical insurance
• life assurance
• income protection
• flexible benefits
• learning opportunities

Responsibilities

• Develop, maintain and test IT Disaster Recovery (ITDR) plans
• Conduct regular risk assessments and impact analyses to identify critical systems and recovery priorities
• Manage global cybersecurity awareness campaigns and training to strengthen security culture
• Collaborate with regional teams to embed security-by-design principles into projects and products
• Lead ongoing ISO 22301 BCM compliance across the organisation

Key requirements

• Strong IT DR skills and ISO22301 compliance experience in a global environment
• Solid understanding of BIA, application dependencies, and stakeholder engagement in IT DR activities
• Experience with threat and risk assessment
• Enthusiasm for cyber awareness and education; ability to lead global initiatives
• Commitment to continuous learning within an international and innovative organisation

• leadership
• stakeholder engagement
• collaboration
• IT Disaster Recovery (ITDR)
• ISO 22301 BCM
• Business Impact Analysis (BIA)

…