Information Security (GRC) Analyst
We are seeking an Information Security (GRC) Analyst to support the development, operation and continuous improvement of information security governance, risk and compliance activities. Working with teams across the business, you will help ensure that security controls, policies and processes are appropriately designed, implemented, documented and monitored. This is an opportunity to contribute to a maturing security function and help strengthen the organisation’s ability to manage information and technology risks effectively.
Your responsibilities will include maintaining information security policies, standards, procedures and control frameworks; supporting risk assessments, control testing and remediation tracking; and preparing clear reports on security risks, control effectiveness and compliance status. You will coordinate evidence collection for internal and external audits, certifications and customer assessments, while monitoring progress against agreed actions. The role will also involve maintaining risk and compliance registers, supporting third-party and supplier security reviews, assisting with security awareness initiatives, and providing guidance to stakeholders on governance and control requirements. You may also contribute to incident reviews, business continuity activities, data protection assessments and the implementation of regulatory or industry changes.
The successful candidate will have experience in information security governance, risk management, compliance, audit or a closely related discipline. You should be comfortable interpreting policies and regulatory requirements, assessing control maturity, analysing evidence and communicating findings to both technical and non-technical audiences. Familiarity with frameworks such as ISO 27001, NIST, CIS Controls, COBIT or SOC 2 is desirable, as is experience with third-party risk management, privacy principles and security assurance processes. Strong organisational skills, attention to detail and the ability to manage multiple priorities are essential. Relevant qualifications such as CISA, CRISC, ISO 27001, CISSP or equivalent experience would be advantageous. A proactive, collaborative approach and a commitment to continuous improvement are key to success in this role.
Information Security (GRC) Analyst
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- Identity Access Management IAM
- SOC Analyst
- Cyber Security Consultant
- Data Protection
- Penetration Tester
- Application Security
- Governance and Compliance
LATEST JOBS
- Senior Manager, Business Infor...
- Senior Data Protection Manager
- Cyber Security Engineer
- PAM Consultant
- Associate Security Engineer
- GRC Consultant
- Cyber Security Manager
- Risk & Controls Analyst (Cyber...
- Security Analyst – Emerging Te...
- PAM Architect
- Senior GRC Analyst
- OT SIEM Engineer