GRC Administrator/Analyst - Business Operations

GRC Administrator/Analyst

Department: Business Operations

Employment Type: Full Time

Location: London

Reporting To: Head of Infosec

Description

Why LBR?

An amazing market position, enviable growth, collaboration and wonderful people are just some of the reasons to further your career with Law Business Research. Our culture is shaped by our core values that promote equality, agility, and respect in everything we do.

Law Business Research has been selected as a winner for the 2024 Inspiring Workplaces Awards. We're proud of our inclusive and inspiring culture here at LBR and we remain committed to creating a positive workplace for all our employees.

We are happy to share that we have partnered with Business Disability Forum to help us on our journey to becoming a more inclusive employer and achieving Level 2 Disability Confident Accreditation.

We also take our place in this world of ours very seriously and engage in a wide variety of charitable and community based initiatives. We work extensively with Swawou School in Sierra Leone, which we established to provide education for 120 girls, and on an ongoing basis we underwrite the school's costs.

'We are proud to be an equal opportunities employer and are committed to ensuring that all candidates are given the same opportunity to succeed regardless of their sex, gender identity/expression or reassignment, sexual orientation, marital status, race, colour, nationality, ethnic or national origin, religion, age or disability.'

Key Responsibilities

1. Administrative & Documentation Management

• Maintain and organise GRC documentation, registers, and electronic filing systems.
• Coordinate departmental communications, respond to enquiries, manage administrative needs, and ensure timely execution of ad hoc tasks.
• Support the preparation of GRC reports monthly.

2. Risk Management Support

• Assist in scheduling and organising monthly risk workshops, fraud assessments, and internal risk reviews.
• Prepare meeting materials, distribute reports, track mitigation actions, and follow up with risk owners.
• Maintain and update the risk register under the direction of the risk function.

3. Compliance Management Support

• Provide user support for compliance systems.
• Coordinate compliance reviews, track corrective actions, gather supporting evidence, and maintain compliance registers.
• Support compliance champions and ensure documentation aligns with organisational structures and regulatory requirements.
• Ensure administrative support for the Head of Infosec.

4. Business Continuity & Resilience Support

• Coordinate Business Continuity Management (BCM) and Business Impact Analysis (BIA) workshops.
• Arrange logistics and communications for annual DR/BCM tests.
• Maintain BCM documentation in partnership with the Risk Officer/BCM Coordinator.

5. GRC Systems Administration

• Manage GRC system configuration, including workflows, forms, notifications, assessments, dashboards, and custom reports.
• Support troubleshooting of GRC system issues, user access, integrations, and data import/export.

6. Support for Third-Party Risk & Client Assurance (DDQ) Requests

• Assist the Head of Information Security in responding to client Due Diligence Questionnaires (DDQs), security assurance requests, and evidence-gathering activities.
• Support the Third Party Risk Management (TPRM) process by coordinating vendor questionnaires, collecting required documentation, tracking responses, and maintaining structured evidence repositories.
• Help ensure timely and accurate completion of all security, compliance, and governance related requests from clients and partners.

7. Committee & Cross Department Liaison

• Provide administrative support to GRC related committees and working groups.
• Act as a liaison across business units to ensure alignment and support for GRC initiatives.

Skills Knowledge and Expertise

Required Skills & Competencies

• Strong organisational, documentation and coordination skills.
• Ability to manage multiple tasks and deadlines reliably.
• Basic understanding of governance, risk, and compliance concepts.
• Clear communication skills and stakeholder friendly approach.
• Comfortable using GRC platforms, compliance systems, and reporting tools.
• High attention to detail, accuracy, and follow through.

Qualifications

• Bachelor's degree preferred (business, compliance, legal, IT, or related field).
• Experience in administrative roles within GRC, risk, compliance, audit, or legal is considered advantageous.

Success Measures

• Accuracy and completeness of documentation, registers, and compliance artefacts.
• Timely scheduling and execution of workshops, reviews, and compliance activities.
• Smooth operation and user satisfaction with GRC systems.
• Improved responsiveness and clarity in risk and compliance tracking.

Preferred Certifications

• GDPR Foundation

Benefits

Our people are our most valuable asset, as such, we offer a wide range of benefits to help ensure that all are supported:

Start of employment:

• Eye Care
• Employee Assistance Programme
• A day off for your birthday

After 3 months employment:

• Pension (4% employer contribution and 4% employee contribution)
• Cycle to Work scheme
• Season ticket loan
• £350 annual wellbeing allowance to contribute to gym membership & fitness classes

After 4 months and 1 year's service:

• Life assurance after 4 months
• Private healthcare after 1 years' service

Additional Perks:

• Company socials e.g., Christmas and Summer parties
• Access to Employee Affinity Networks
• Mentoring scheme
• Volunteering Day
• Mortgage Advice

We are committed to making our organisation an inclusive, respectful & engaging place to work with a culture shaped by our core values that promote equality, collaboration & respect in everything we do. We are proud to be part of the Disability Confident Scheme, meaning we are committed to being inclusive and accessible, which starts with our application and recruitment process. If you do require any reasonable adjustments to be made, please let us know as part of our application page.