Information Security Analyst – GRC & Risk
We are seeking an Information Security Analyst – GRC & Risk to support the development, implementation and continuous improvement of effective information security governance, risk and compliance practices. This role will help protect information assets, strengthen organisational resilience and ensure that security activities align with applicable regulations, industry standards and business objectives. You will work closely with technology, legal, compliance, audit and operational teams, providing clear, practical advice on information security risks and controls.
Key responsibilities will include maintaining security policies, standards, procedures and risk registers; conducting information security and third-party risk assessments; supporting the identification, evaluation and treatment of risks; and monitoring the effectiveness of controls. You will contribute to internal and external audits, coordinate evidence gathering, track remediation actions and prepare concise reports for stakeholders and senior management. The role will also involve supporting governance forums, reviewing security requirements for new projects and services, assessing supplier assurance documentation, and helping to promote a positive culture of security and regulatory awareness across the organisation.
Applicants should have experience in information security governance, risk management, compliance, audit or a closely related discipline, with a sound understanding of frameworks such as ISO 27001, NIST or COBIT. Knowledge of data protection requirements, third-party risk and control testing would be advantageous. You will need strong analytical and organisational skills, excellent written and verbal communication, and the confidence to engage with stakeholders at all levels. Relevant professional qualifications, such as CISA, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor, are desirable, although equivalent practical experience will be considered. The successful candidate will be methodical, commercially aware and able to translate technical and regulatory requirements into clear, proportionate actions.
Information Security Analyst – GRC & Risk
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- IT Security Manager
- Security Architect
- Identity Access Management IAM
- Data Protection
- Cyber Security Consultant
- SOC Analyst
- Governance and Compliance
- Risk Analyst
- Penetration Tester
LATEST JOBS
- Senior Consultant or Manager,...
- Third Party Cyber Risk Lead
- VodafoneThree - Cyber Security...
- Associate Director, Cyber Secu...
- Senior Cyber Security Engineer
- Manager, Senior Manager, Cyber...
- Consultant, Cyber Security Ope...
- Head of Department, Cyber & In...
- Application Security Engineer
- SOC Manager
- Manager, Senior Manager, Cyber...
- IT & Security Analyst