Senior Governance Analyst
Royal Mail
Job Description
Job reference 338710 Senior Governance Analyst Competitive salary plus car allowance, healthcare, 18% annual bonus potential, 25 days annual leave plus bank holidays rising with service and a company pension scheme with highly competitive contribution rates. Permanent, Full time Hybrid working in London or Sheffield office x3 days a week Shape the future of Cyber Security at RMG RMG is strengthening its cyber security capability and we’re looking for a Senior Cyber Governance Analyst to play a pivotal role in protecting our organisation, our customers, and our data. This is a high‑impact position for someone who thrives on responsibility, influence, and the opportunity to drive meaningful change across a complex business.
The role Lead Cyber Governance Frameworks: Drive the deployment and ongoing adherence to key standards including Cyber Essentials, ISO 27001, NIST, GDPR and other relevant frameworks. Risk Management: Support the identification, assessment, and mitigation of cyber risks, ensuring risks are documented, monitored, and effectively managed. Policy & Standards Development: Own the creation, review, and enhancement of cyber security policies, standards, and guidelines aligned to regulatory requirements and organisational objectives.
Compliance Monitoring & Audit: Conduct regular assessments, maintain certifications, and lead internal/external audit activity, ensuring the business meets all cyber and information security obligations. Metrics & Reporting: Produce meaningful dashboards and reports that track governance effectiveness and provide clear insights to senior stakeholders. Cross‑Functional Collaboration: Partner with IT, Legal, Risk, Procurement, Sales, and business change teams to embed cyber governance into business processes and decision‑making.
Continuous Improvement: Identify gaps, drive enhancements, and champion initiatives that uplift cyber maturity across RMG and its subsidiaries. Third‑Party Cyber Risk Management: Assess and manage supply chain cyber risks, conducting assurance checks and guiding business owners on supplier risk decisions. Customer Assurance: Act as a subject matter expert, providing high‑quality responses to customer cyber assurance requests and representing RMG’s security posture externally.
Your Experience A cyber‑related qualification (e.g., CISM, CISSP, CRISC, CGEIT, ISO 27001 Lead Auditor) or working towards one. 3–5 years’ experience in cyber governance, risk, and compliance within a large or complex organisation. Strong knowledge of frameworks such as ISO 27001, NIST, GDPR, SOX, CAF, NCSC guidance, and Cyber Essentials. Familiarity with cyber security tools, risk methodologies, and audit processes.
Excellent communication skills, able to translate complex concepts for technical and non‑technical audiences. High attention to detail, particularly in policy development and compliance documentation. Strong analytical and problem‑solving skills.
Proven ability to influence stakeholders, build trust, and work collaboratively across teams. Why join RMG? Work at the heart of a business where cyber security is a strategic priority.
Influence senior stakeholders and shape organisation‑wide security practices. Be part of a supportive, growing cyber function with opportunities for development. Extra Benefits Family friendly support – enhanced maternity pay, paternity leave, adoption leave and shared parental leave.
Supportive and generous company sick pay. Funded Dental – As a manager you are eligible to a level of employer funded dental insurance. Health Assessment – As a manager you are eligible to an employer funded health assessment every 2 years.
Benefits Account – Access to a personal benefits account on the ‘My Bundle+’ platform with over 800 retail offers. Your Wellbeing – 24/7 access to services and tools for physical, mental, financial, and social support. Next Steps The next stage of the selection process will be a face‑to‑face/virtual interview consisting of competency‑based and role specific questions.
Royal Mail Group is committed to inclusion and welcoming applications from all individuals. We are a Gold signatory to the Armed Forces Covenant and encourage applications from ex‑Armed Forces personnel, reservists, veterans, cadet instructors, and military spouses/partners. #J-18808-Ljbffr