Information Security Analyst

As one of the world's largest networks of audit, tax and consulting firms, RSM delivers big ideas and premium service to help middle‑market businesses thrive. We are a fast-growing firm with big ambitions – we have a clear goal to become the premium adviser to the middle market, globally. This vision touches everything we do, motivating and inspiring us to become better every day.

If you are looking for a firm where you can build a future and make an impact, then RSM is the place for you.

We are looking for an Information Security GRC (Governance, Risk, and Compliance) Analyst to join our National Technology team at RSM UK. This role can be based in our London, Gatwick or Stoke office and will be responsible for developing, implementing, and maintaining a robust information security governance, risk management, and compliance program. This role involves assessing and managing risks, ensuring compliance with relevant regulations and standards, and promoting a culture of security awareness across the organization.

• Assisting with the day‑to‑day management and maintenance of the Information Security Management System including the development and maintenance of the current information security policies, standards, and procedures
• Conducting risk assessments and identifying potential security threats and vulnerabilities, including risk assessments for projects and new initiatives
• Assisting with the completion of questionnaires for new and existing clients
• Conducting supplier assurance activities including conducting visits to existing and new suppliers, conducting due diligence, reviewing new software and services, and assessing existing suppliers
• Monitoring and ensuring compliance with relevant regulations, standards, and frameworks (e.g., ISO 27001, Cyber Essentials Plus)
• Collaborating with various departments to ensure security controls are implemented and maintained
• Conducting regular internal information security audits and assessments to evaluate the effectiveness of security controls

• Demonstrable relevant experience and awareness of information security obtained from a previous information security role including the supporting and administering of an ISMS
• Experience of conducting supplier information security reviews
• Great organisational skills
• Self‑motivated regarding own development and development of others within the organisation
• Excellent clear and concise communication and interpersonal skills, orally, electronically and written, with the ability to use tact and persuasive skills
• Strong analytical / investigative skills

• Hybrid and Flexible working
• 26 Days Holiday (with the option of purchasing additional days)
• Lifestyle, Health, and Wellbeing including financial wellbeing benefits such as financial tools, electric car scheme and access to a virtual GP.
• Access to a suite of 300+ courses on demand developed by our in‑house Talent Development team.

At RSM, we want to create a strong sense of belonging so that people of all identities, backgrounds, and cultures feel they can bring their true self to work. Our clients come from all walks of life. We aim to achieve that same diversity of background, experience and perspective in our own teams, so that we can genuinely understand our client's needs.

Diverse teams bring a broader range of ideas and insights to work. That's why we're working together to ensure our firm's principles and processes support a firm culture that embraces difference and strengthens inclusion.