Information Security (GRC) Specialist
We are seeking an Information Security (GRC) Specialist to support the development, maintenance and continuous improvement of governance, risk and compliance practices across the organisation. This is an opportunity to contribute to a mature information security environment, helping to ensure that business activities, technology services and third-party relationships are managed in line with relevant policies, regulatory obligations and industry standards.
Key responsibilities will include maintaining information security policies, standards and procedures; coordinating risk assessments and supporting the creation and tracking of remediation plans; monitoring compliance with applicable legislation, contractual requirements and recognised frameworks; and preparing clear reports for senior stakeholders. You will assist with internal and external audits, gather and assess evidence, manage security exceptions, and support the completion of customer, supplier and regulatory questionnaires. The role will also involve maintaining governance records, contributing to security awareness initiatives, and working with teams across the business to embed practical and proportionate controls. You will be expected to identify opportunities for improvement and help ensure that risks are understood, owned and addressed effectively.
The successful candidate will have experience in an information security, governance, risk or compliance role, with a sound understanding of frameworks such as ISO 27001, NIST or related control standards. Experience of conducting risk assessments, supporting audits and interpreting security requirements is essential, ideally within a regulated or technology-led environment. Relevant qualifications such as CISM, CRISC, CISSP, ISO 27001 Lead Implementer or Lead Auditor are desirable, although equivalent practical experience will be considered. You should be analytical, organised and confident communicating with both technical and non-technical stakeholders. The ability to manage competing priorities, challenge constructively and produce accurate, well-structured documentation will be important. A proactive approach, strong attention to detail and a commitment to continuous improvement are essential.
Information Security (GRC) Specialist
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- IT Security Manager
- Security Architect
- Identity Access Management IAM
- Data Protection
- Cyber Security Consultant
- SOC Analyst
- Governance and Compliance
- Risk Analyst
- Penetration Tester
LATEST JOBS
- Senior Consultant or Manager,...
- Third Party Cyber Risk Lead
- VodafoneThree - Cyber Security...
- Associate Director, Cyber Secu...
- Senior Cyber Security Engineer
- Manager, Senior Manager, Cyber...
- Consultant, Cyber Security Ope...
- Head of Department, Cyber & In...
- Application Security Engineer
- SOC Manager
- Manager, Senior Manager, Cyber...
- IT & Security Analyst