Information Security Analyst

Job Title: Information Security Analyst / GRC Analyst

Start Date: ASAP

Duration: 3–6 month contract (likely need the full 6 months)

Role Summary

The organisation is about to launch refreshed Modern Device Experience laptops to all colleagues. To support enhanced user experience, approved software and apps will be prepackaged for download.

Working as part of the wider Group Cyber Security Team as an Information Security GRC Analyst, you will help assess vendors, software and applications against third‑party lifecycle frameworks, information security policies, standards and benchmarks.

In addition, you will support the wider GRC teams with BAU activities and support tickets.

Key Responsibilities

• Assess vendors, software and applications against third‑party lifecycle frameworks, information security policies, standards and benchmarks.
• Conduct customer and vendor security assessments.
• Support the assessment of risks and third parties.
• Assist with data protection impact assessments.
• Escalate risks and non‑compliance appropriately.
• Support the wider GRC teams with BAU activities and support tickets.

Required Experience

• 2+ years' experience working in a GRC or Information Security role.
• Active involvement in customer and vendor security assessments.
• Good working knowledge of key frameworks, such as NIST CSF and ISO 27001.
• Experience of data protection impact assessments, assessing risk and third parties.
• Ability to work independently to agreed processes and elevate risks and non‑compliance appropriately.