Job Description

Junior Governance, Risk and Compliance Analyst
Northampton
Full–time
PCD310191

Job description
Junior Governance, Risk and Compliance Analyst

We’ll also equip you with a benefits package that grows as you grow with the organisation:
• Competitive bonus
• Save-as-you-earn scheme
• Buy-as-you-earn scheme
• Contributory pension scheme
• Life assurance
• Colleague discount across a variety of Group businesses

Support the Governance, Risk, and Compliance (GRC) team in ensuring the effective identification, assessment, management, and treatment of risks across the organisation. This includes assisting in the development and implementation of risk management frameworks, monitoring compliance with internal policies and external regulatory requirements, and contributing to the continuous improvement of governance processes. Work collaboratively with business units to identify potential risks, recommend appropriate mitigation strategies, and support the escalation and reporting of key risk issues to senior management and relevant committees.

Not Sure you Qualify? We’re driving to become a truly inclusive employer, where everyone in our Group feels safe, welcome and confident to be their authentic selves - you be you, it makes us, us, as we say. If you’re interested in this opportunity but your past experience doesn’t align perfectly, we encourage you to apply anyway. You might be just the right candidate for this or other roles with us.

This role is Hybrid working, so travel to the organisation's head office based in Northampton is required for part of your working week!

Principal Accountabilities
• Assist in planning, conducting, and documenting Data Protection Impact Assessments (DPIAs) and privacy risk assessments by analyzing data-processing activities, mapping data flows, identifying potential privacy and security risks, evaluating the necessity and proportionality of processing, assessing vendor and system implications, and recommending appropriate mitigation strategies to ensure alignment with applicable legal and regulatory requirements while supporting cross-functional stakeholders throughout the assessment process.
• Help manage and respond to data subject access requests (DSARs) and other privacy inquiries.
• Contribute to the creation and maintenance of the Record of Processing Activities (ROPA)
• Support IT risk management activities, including risk assessments and remediation tracking
• Assist with maintaining PCI DSS compliance, including evidence collection, control monitoring, and audit support.
• Collaborate with Group legal, IT, and other departments to help promote security & privacy principles
• Support the implementation and maintenance of policies, procedures, and controls.
• Perform other duties as assigned to support the wider Infosec team.

What’s in it for you?

You’ll be supported by some fantastic training and development and have the opportunity to learn, grow and develop across the organisation.

A bit about us

As the largest distributor of building materials in the UK, the organisation has been helping to build Britain for over 200 years.