Security Analyst

Location – London three times a week on site

We’re looking for a hands on GRC Security Analyst to support a growing security function within a fast-paced and developing environment.

This is a great opportunity for someone early in their GRC career who wants to build strong foundational experience across risk, policy and third-party assurance.

You’ll be supporting core GRC activities in a pragmatic, delivery focused environment, helping to improve security maturity while keeping day to day operations moving.

• Supporting third-party risk and assurance activities
• Assisting with security policy reviews and updates
• Maintaining and updating risk registers and documentation
• Supporting audits and compliance activities
• Helping drive basic GRC processes and controls
• Carrying out tasks aligned with wider “Know Your System” (KYS) principles (understanding assets, processes and risks across the environment)
• Currently a developing / low-maturity security environment
• Work is often reactive and fast-moving
• Strong need for someone who can roll up their sleeves and deliver
• You’ll play a key role in establishing and improving GRC basics

• Third-party risk / supplier assurance
• Policy management
• Risk and compliance processes
• Understanding of frameworks such as:
• ISO 27001 / NIST / CIS (basic awareness is fine)
• Comfortable working in a delivery-focused, directive environment
• Someone practical, reliable and detail oriented