Information Security GRC Analyst
We are seeking an Information Security GRC Analyst to support the development, maintenance, and continuous improvement of information security governance, risk, and compliance activities. The role will help ensure that security policies, controls, and processes remain aligned with regulatory obligations, industry standards, and business objectives. You will work with stakeholders across technology, operations, privacy, legal, and risk functions to promote a consistent and practical approach to managing information security risk.
Key responsibilities include maintaining security policies, standards, procedures, and control documentation; coordinating risk assessments, control testing, and remediation tracking; supporting internal and external audits; and preparing clear reports, dashboards, and metrics for management review. You will assist with third-party and supplier security assessments, review evidence of control operation, monitor exceptions, and help ensure that identified risks are appropriately recorded, prioritised, and addressed. The role will also contribute to security awareness initiatives, regulatory reviews, business impact assessments, and the ongoing enhancement of governance frameworks.
The successful candidate will have experience in information security governance, risk management, compliance, audit, or a related discipline. A working knowledge of frameworks and standards such as ISO 27001, NIST, COBIT, SOC 2, or relevant privacy and regulatory requirements is desirable. You should be confident analysing complex information, evaluating control effectiveness, and translating technical or regulatory requirements into clear business actions. Strong written and verbal communication skills are essential, along with excellent organisation, attention to detail, and the ability to manage multiple priorities. Experience using GRC platforms, maintaining risk registers, and working with distributed stakeholders would be advantageous. Professional certifications such as CISA, CRISC, CISSP, ISO 27001, or equivalent are welcomed but not essential.
Information Security GRC Analyst
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- Identity Access Management IAM
- SOC Analyst
- Cyber Security Consultant
- Data Protection
- Penetration Tester
- Application Security
- Governance and Compliance
LATEST JOBS
- Senior Manager, Business Infor...
- Senior Data Protection Manager
- Cyber Security Engineer
- PAM Consultant
- Associate Security Engineer
- GRC Consultant
- Cyber Security Manager
- Risk & Controls Analyst (Cyber...
- Security Analyst – Emerging Te...
- PAM Architect
- Senior GRC Analyst
- OT SIEM Engineer