Cyber GRC Analyst (Apprentice) at Financialombudsman

Support internal reviews of cyber security policies, procedures and controls by gathering evidence and completing checklists against agreed standards (e.g., Cyber Essentials, ISO 27001, NIST) under supervision.
Help evaluate cyber controls by recording what is in place, noting exceptions, and escalating gaps or concerns to the assessor/lead.
Assist with reviewing systems, processes and data protection measures by gathering information from system owners and keeping evidence organised.
Help identify practical risk treatments (mitigations) for processes, technology, and outsourced products/services, and support tracking progress to closure.
Maintain assessment documentation (e.g., working papers, evidence logs, action trackers) so findings and follow-ups can be monitored and reported.
Work with colleagues across IT, Enterprise Risk, Data Protection and Information Security to gather information and support agreed improvements.
Support cyber risk assessments by helping identify threats, vulnerabilities and impacts, and capturing results in the agreed templates and risk register.
Stay curious about industry trends, common cyber threats, and relevant guidance, and share highlights with the team.
Support regular reporting by updating trackers and helping produce simple summaries of risk and control status (e.g., KPIs/KRIs), with guidance.
To be considered for this role, you'll need to show us that you've got the skills and capabilities. You'll have to meet the following minimum criteria:
Minimum Criteria
You will have achieved Three A levels or equivalent and GCSE English and Maths or have significant work experience in a relative field.
On enrolment onto the apprenticeship (September 2026) you be at least 18 years of age, you will not be in full-time education or receiving of funding for other learning programmes.
You will need a full UK Right to Work for the duration of the apprenticeship, and have valid and eligible residency status and be a resident in the UK for 3 years before the start of the apprenticeship
In addition your CV shows us:
An interest in cyber security, risk and compliance, with a willingness to learn (ensure your CV helps to reflect this)
Some experience (from school, work, volunteering or self-study) of documenting processes, following procedures, or working with evidence.
A basic understanding of what cyber security controls are (e.g., access control, patching, backups, MFA) and why they matter-or a willingness to learn quickly.
Why You'll Love Working With Us:
Flexibility : Work your way - hybrid, or in-office
Wellbeing : [Health plan, gym memberships, mental health support]
Growth : We invest in your future with [courses, mentorship, promotions]
Culture : Diverse. Inclusive. Collaborative. Fun.
We also offer an attractive, competitive sa

Cyber GRC Analyst (Apprentice)

About the role

Responsibilities

Benefits

Additional Information

Your Match

Company Intel

What employees say

Interested in this role?