Information Security Analyst (GRC)

Reference: sarh5zhp3ha0e5v6ofcs

We are seeking an Information Security Analyst (GRC) to support the development, maintenance and continuous improvement of information security governance, risk and compliance activities. This role will help ensure that security practices align with applicable laws, regulations, industry standards and organisational policies. You will work with stakeholders across technology, operations and business functions to identify risks, assess controls and promote a consistent approach to information security.

Key responsibilities include maintaining security policies, standards, procedures and control frameworks; coordinating risk assessments and supporting the documentation of risk treatment plans; monitoring compliance with internal requirements and external obligations; and assisting with internal and external audits. You will collect and review evidence, track remediation actions, prepare management reports and highlight areas requiring attention. The role will also support third-party and supplier security assessments, contribute to security awareness initiatives, and help evaluate the impact of changes to systems, processes and regulations.

The successful candidate will have experience in information security governance, risk management, compliance, audit or a related discipline. A practical understanding of frameworks and standards such as ISO 27001, NIST, COBIT or relevant data protection regulations is desirable. You should be confident analysing information, documenting findings and communicating risk clearly to both technical and non-technical audiences. Strong organisational skills, attention to detail and the ability to manage multiple priorities are essential. Relevant professional certifications, such as CISA, CRISC, CISSP, ISO 27001 or equivalent, would be advantageous. This is an opportunity to contribute to a mature security culture while helping strengthen controls, improve resilience and support informed business decision-making.

£45,000.00 - £50,000.00
Per annum
Added 09/10/2026
Reference: sarh5zhp3ha0e5v6ofcs

Information Security Analyst (GRC)

London, England, United Kingdom Permanent Security Analyst

Other similar jobs

Information Security GRC Analyst

Added 14/10/2026

We are seeking an Information Security GRC Analyst to support the development, maintenance, and continuous improvement of information security governance, risk, and compliance activities. The role will help ensure that security policies, controls, and processes remain aligned with regulatory obligations, industry standards, and business objectives. You will work with stakeholders across technology, operations, privacy, legal, and risk functions to promote a consistent and practical approach to managing information security risk. Key responsibilities include maintaining security policies, standards, procedures, and control documentation; coordinating risk assessments, control testing, and remediation tracking; supporting internal and external audits; and preparing clear reports, dashboards, and...

Learn more

Information Security (GRC) Analyst

Added 07/10/2026

We are seeking an Information Security (GRC) Analyst to support the development, operation and continuous improvement of information security governance, risk and compliance activities. Working with teams across the business, you will help ensure that security controls, policies and processes are appropriately designed, implemented, documented and monitored. This is an opportunity to contribute to a maturing security function and help strengthen the organisation’s ability to manage information and technology risks effectively. Your responsibilities will include maintaining information security policies, standards, procedures and control frameworks; supporting risk assessments, control testing and remediation tracking; and preparing clear reports on security risks, control...

Learn more

Information Security GRC Analyst

Added 24/09/2026

We are seeking an Information Security GRC Analyst to support the development, implementation and continuous improvement of governance, risk and compliance practices. This role will help ensure that information security policies, controls and processes remain effective, proportionate and aligned with business objectives, regulatory expectations and recognised industry frameworks. You will work with stakeholders across technology, operations, legal, privacy and internal audit to promote a consistent and practical approach to managing information security risk. Key responsibilities will include maintaining security policies, standards, procedures and control documentation; coordinating risk assessments and tracking remediation activities; supporting internal and external audits; and preparing clear...

Learn more

Information Security GRC Analyst

Added 03/09/2026

We are seeking an Information Security GRC Analyst to support the development, implementation and continuous improvement of governance, risk and compliance activities. This role will help ensure that information security policies, standards and controls are aligned with business objectives, regulatory obligations and recognised industry frameworks. You will work closely with technology, privacy, legal, procurement and operational teams to promote a consistent and effective approach to managing information security risk. Key responsibilities include maintaining information security policies, procedures, standards and control documentation; supporting risk assessments, control testing and remediation tracking; coordinating internal and external audit activities; and preparing clear reports for...

Learn more

Information Security GRC Analyst

Added 03/09/2026

We are seeking an Information Security GRC Analyst to support the development, maintenance, and continuous improvement of information security governance, risk, and compliance activities. This role will help ensure that security policies, processes, and controls remain aligned with business objectives, regulatory obligations, and recognised industry standards. The successful candidate will work closely with technology, risk, legal, privacy, and operational teams to promote a consistent and effective approach to managing information security risk. Key responsibilities include maintaining security policies, standards, procedures, and control frameworks; coordinating risk assessments, control reviews, and remediation activities; and supporting internal and external audits. You will collect...

Learn more

Junior Information Security Analyst (GRC) - Engine by Starling

Added 02/09/2026

We are seeking a motivated Junior Information Security Analyst to support governance, risk and compliance activities across a fast-paced technology environment. This is an excellent opportunity for someone at the start of their information security career who is keen to develop practical experience in risk management, security controls, regulatory requirements and assurance. You will work with colleagues across technology, operations and business teams to help maintain a strong security culture and support the continuous improvement of the organisation’s information security framework. Your responsibilities will include assisting with security risk assessments, control reviews and the maintenance of risk and compliance registers....

Learn more

Junior Information Security Analyst (GRC) - Engine by Starling

Added 02/09/2026

We are seeking a Junior Information Security Analyst to support governance, risk and compliance activities within a growing technology environment. This is an excellent opportunity for someone early in their information security career who is keen to develop practical experience across security controls, risk management, regulatory requirements and assurance. You will work closely with colleagues across technology, operations and the wider business to help maintain a strong security posture and promote effective risk management. Your responsibilities will include supporting the maintenance of information security policies, standards and procedures; assisting with risk assessments, control reviews and evidence collection; and helping to...

Learn more

Information Security GRC Lead

Added 21/09/2026

We are seeking an experienced Information Security GRC Lead to strengthen governance, risk management and compliance capabilities across a complex technology and business environment. This role will provide strategic direction while remaining closely involved in the delivery of practical security initiatives, ensuring that information security risks are identified, assessed and managed in line with business priorities and regulatory expectations. Key responsibilities will include developing and maintaining information security policies, standards and control frameworks; coordinating enterprise-wide risk assessments; managing risk treatment plans and tracking remediation activities; and preparing clear reporting for senior leadership and relevant governance forums. You will lead internal...

Learn more

Information Security & GRC Specialist

Added 17/09/2026

We are seeking an Information Security & GRC Specialist to support the development, implementation and continuous improvement of information security governance, risk and compliance activities. The role will help protect business information and technology assets by translating security requirements into practical policies, processes and controls. You will work with stakeholders across technology, operations, legal, privacy and business functions to promote a strong security culture and ensure that risks are identified, assessed and managed effectively. Key responsibilities include maintaining information security policies, standards and procedures; coordinating risk assessments, control reviews and remediation plans; supporting internal and external audits; and monitoring compliance...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 09/09/2026

An opportunity is available for an Information Security Governance, Risk, and Compliance (GRC) Specialist to support the development, implementation, and continuous improvement of information security governance and risk management practices. The successful candidate will help ensure that security policies, controls, and processes align with business objectives, regulatory obligations, and recognised industry frameworks. This role will work closely with technology, operational, legal, privacy, and business stakeholders to promote a consistent and effective approach to managing information security risk. Key responsibilities will include maintaining information security policies, standards, procedures, and control documentation; coordinating risk assessments and tracking remediation activities; supporting internal and...

Learn more

Information Security GRC Lead

Added 08/09/2026

We are seeking an experienced Information Security GRC Lead to strengthen and mature governance, risk and compliance activities across the organisation. In this role, you will lead the development, implementation and continuous improvement of information security policies, standards, procedures and control frameworks. You will work closely with technology, legal, privacy, risk, audit and business stakeholders to ensure that security requirements are clearly defined, consistently applied and aligned with business objectives and regulatory obligations. Your responsibilities will include maintaining the information security risk management programme, coordinating risk assessments, documenting remediation plans and monitoring progress against agreed actions. You will lead internal...

Learn more

Senior Information Security Consultant (GRC)

Added 01/09/2026

We are seeking a Senior Information Security Consultant (GRC) to provide expert guidance on governance, risk and compliance across a complex technology and business environment. The successful candidate will work with stakeholders at all levels to assess information security risks, strengthen control frameworks and support the continued development of effective security governance practices. This role requires a pragmatic consultant who can translate regulatory, technical and business requirements into clear, achievable improvements. Responsibilities will include conducting information security and technology risk assessments, maintaining risk registers and developing appropriate mitigation plans. You will support the design, implementation and review of security policies,...

Learn more

Senior Information Security Consultant (GRC)

Added 01/09/2026

We are seeking a Senior Information Security Consultant (GRC) to provide expert guidance on governance, risk and compliance across a complex technology and business environment. The successful candidate will help strengthen information security frameworks, support risk-informed decision-making and ensure that security practices align with regulatory obligations, industry standards and organisational objectives. This role requires a confident consultant who can engage effectively with senior stakeholders, technical teams and business leaders. Key responsibilities will include conducting information security and technology risk assessments, maintaining risk registers, developing treatment plans and advising on appropriate controls. You will lead or contribute to security governance activities,...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 18/08/2026

We are seeking a dedicated Information Security Governance, Risk, and Compliance (GRC) Specialist to join our team. In this role, you will be responsible for developing and maintaining the organization's information security policies and procedures, ensuring compliance with applicable regulations and standards. You will conduct risk assessments, identify vulnerabilities, and implement effective mitigation strategies to protect sensitive data. Collaborating with cross-functional teams, you will lead initiatives to enhance the organization’s overall security posture and ensure that all security measures align with business objectives. Your expertise will be crucial in conducting regular audits and assessments to evaluate the effectiveness of current...

Learn more

SAP Security GRC Analyst

Added 24/09/2026

We are seeking an experienced SAP Security GRC Analyst to support the design, implementation, and ongoing management of SAP security and governance, risk, and compliance solutions. In this role, you will help protect critical business systems by ensuring that user access is appropriately provisioned, monitored, and reviewed. You will work closely with business stakeholders, functional teams, internal technology teams, and audit partners to maintain secure and compliant SAP environments. Your responsibilities will include administering SAP GRC Access Control, including access requests, approvals, risk analysis, emergency access management, and user and role provisioning. You will design, maintain, and review SAP roles...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.