GRC Security Specialist
We are seeking a GRC Security Specialist to support the development, implementation and continuous improvement of governance, risk and compliance practices across the organisation. In this role, you will help ensure that information security policies, processes and controls are aligned with business objectives, regulatory obligations and recognised industry frameworks. You will work with stakeholders across technology, operations, legal, privacy and internal audit to promote a consistent and practical approach to managing security risk.
Your responsibilities will include maintaining security policies, standards and procedures; coordinating risk assessments and control reviews; supporting internal and external audits; tracking remediation activities; and preparing clear reports for senior stakeholders. You will assist with monitoring compliance against frameworks such as ISO 27001, NIST, SOC 2 or relevant data protection requirements, while helping control owners understand their obligations and evidence requirements. The role will also involve supporting third-party and supplier risk assessments, reviewing security questionnaires, contributing to business continuity activities and helping improve governance processes through automation and effective documentation.
Applicants should have experience in information security governance, risk management, compliance, audit or a related discipline, together with a practical understanding of security controls and risk assessment methodologies. Familiarity with standards such as ISO 27001, NIST CSF, CIS Controls or similar frameworks is desirable. Strong analytical, organisational and communication skills are essential, as is the ability to translate technical and regulatory requirements into clear, actionable guidance. Relevant professional qualifications, such as CISA, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor, are advantageous. You should be comfortable managing multiple priorities, working independently and collaboratively, and engaging confidently with stakeholders at all levels. A continuous improvement mindset and a commitment to maintaining high standards of confidentiality, integrity and professionalism are also important.
GRC Security Specialist
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- IT Security Manager
- Security Architect
- Identity Access Management IAM
- Data Protection
- Cyber Security Consultant
- SOC Analyst
- Governance and Compliance
- Risk Analyst
- Penetration Tester
LATEST JOBS
- Senior Consultant or Manager,...
- Third Party Cyber Risk Lead
- VodafoneThree - Cyber Security...
- Associate Director, Cyber Secu...
- Senior Cyber Security Engineer
- Manager, Senior Manager, Cyber...
- Consultant, Cyber Security Ope...
- Head of Department, Cyber & In...
- Application Security Engineer
- SOC Manager
- Manager, Senior Manager, Cyber...
- IT & Security Analyst