Information Security GRC Analyst

Information Security GRC Analyst

6 Months

GBP
45k FTC or GBP
450/Day Inside IR35

London

We are seeking an experienced Information Security GRC Analyst to support the delivery of Governance, Risk and Compliance (GRC) services for a leading organisation.

The Information Security GRC Analyst role will be an initial 6 month contract, and can be offered as either a FTC with a salary of between GBP
30 - GBP
45k, or day rate contract between GBP
350 - GBP
450/Day Inside IR35 on an umbrella solution. The role is based in London and will be office based 2 days per week and the remainder remote.

You will work with senior stakeholders, technology teams and security leadership to strengthen the organisation's cyber security posture through risk management, compliance assurance and security governance. This role suits a security professional who can provide practical, risk-based advice in a client-facing environment.

• Support GRC activities aligned with ISO 27001, NIST Cybersecurity Framework, Cyber Essentials and Gov Assure.
• Conduct information security risk assessments across business processes, projects, technology platforms and third-party suppliers.
• Maintain risk registers, track remediation actions and support cyber risk management.
• Produce security policies, standards, assessment reports, compliance evidence and executive reporting.
• Support audits, control reviews, assurance and compliance assessments.
• Engage stakeholders, facilitate workshops and gather evidence to support security initiatives.
• Contribute to supplier assurance and third-party risk management.
• Improve security governance processes and controls.
• Support security best practices, data governance and Secure by Design principles across operational, recovery and transformation work streams.

• 3-5 years' experience in Information Security, Cyber Security, GRC, IT Audit or Risk Management.
• Experience in security risk assessments, control reviews and audit or compliance activities.
• Strong understanding of security governance, risk management and ISO 27001.
• Familiarity with NIST Cybersecurity Framework and Cyber Essentials.
• Strong stakeholder engagement, communication, report writing and presentation skills.
• Ability to communicate security concepts to technical and non-technical audiences.

• Experience in government, public sector, regulated or enterprise environments.
• Knowledge of Gov Assure and public sector security requirements.
• Familiarity with Microsoft Azure and AWS.
• Experience with GRC platforms and risk management tools.
• Understanding of Secure by Design and security architecture principles.

One or more of the following would be advantageous:

• ISO 27001 Lead Implementer or Lead Auditor
• Security+
• CGRC
• CISA
• CRISC
• CISSP / Associate CISSP

Information Security GRC Analyst, Information Security Analyst, Information Security GRC Analyst , Security Analyst, Information Security GRC Analyst , GRC Analyst, Information Security GRC Analyst, ISO
27001, Azure, AWS, NIST, Cyber essentials, analyst, Information Security, GRC, IT audits, Risk Management