Cybersecurity GRC Analyst

VPN Global; Altrincham; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

VPN Global Testing Services Ltd. is seeking a Cybersecurity GRC Analyst with 3+ years of experience to contribute to our ISO 27001 ISMS and risk management program in the UK. You will support audits, maintain documentation, and collaborate with teams to strengthen security controls.

Ideal candidates have hands-on ISO 27001 knowledge, familiarity with Cyber Essentials+, and strong communication skills for cross-functional engagement across the business.

Qualifications

• Experience in risk, information security, compliance or internal audit in a professional services setting.
• Knowledge of ISO 27001 and Cyber Essentials+ ISMS.
• Strong attention to detail and integrity handling confidential information.
• Organised and structured approach to tasks and priorities.
• Excellent communication with stakeholders at all levels.
• Proactive, forward-thinking mindset and interest in using technology to improve processes.
• Collaborative across multiple functions with strong written and verbal communication.
• Bachelor's degree (or higher) in a related field; relevant certifications preferred (CISSP/CISM/CISA, ISO 27001).

Responsibilities

• Establish and maintain the ISMS in line with ISO 27001.
• Assist with ISO 27001 audits: preparation, evidence gathering, follow-up actions.
• Monitor compliance with internal policies and track non-conformities.
• Maintain ISMS documentation: asset registers, risk assessments, and Statements of Applicability (SoA).
• Provide support on third-party security and supplier risk assessments.
• Contribute to enterprise risk assessments and remediation tracking.
• Assist with control testing and compliance reviews across the business.
• Respond to regulatory queries and support compliance processes across the business.
• Collaborate with teams across the business to promote information security practices.

Skills

Risk management

ISO 27001 knowledge

Confidentiality

Organisation

Stakeholder communication

Proactive mindset

Cross-functional collaboration

Written and verbal communication

Education

Bachelor's degree or higher

CISSP/CISM/CISA or ISO 27001 certifications

Job description

VPN Global Testing Services Ltd. have been established as a Software Development and Information Technology Services Company with main goal to provide quality IT services to clients globally. We deliver technology-driven business solutions that meet the strategic objectives of our clients. We develop, implement, maintain and support the IT applications by providing smart and intelligent solutions, high quality and low-cost service.

We believe that IT should actually help you to run your business more effectively and efficiently. We understand that the IT requirements of your business may vary as your company grows and changes, which is why we are committed to delivering cost effective Solutions. We are looking for a 3+ Experience Cybersecurity GRC Analyst for our growing team.

Key areas of responsibilities:

• Establish, Support the maintenance and continuous improvement of the Information Security
• Management System (ISMS) in line with ISO 27001 requirements
• Assist with internal and external ISO 27001 audits, including preparation, evidence gathering, and follow-up actions
• Monitor compliance with internal policies and procedures, tracking and escalating non-conformities where required
• Maintain key ISMS documentation, including asset registers, risk assessments, and Statements of Applicability (SoA)
• Provide support on third-party security and supplier risk assessments, ensuring appropriate controls are in place
• Contribute to enterprise risk assessments, including identifying risks, assessing controls, and tracking remediation actions
• Assist with control testing and compliance reviews across the business
• Respond to and support risk, compliance, and regulatory queries from internal stakeholders
• Support wider regulatory compliance processes, including checks, reviews, and continuous improvement initiatives
• Collaborate with teams across the business to promote good risk and information security practices

Key skills we are looking for:

• Previous experience within a risk, information security, compliance, or internal audit environment, ideally within a professional services firm
• Working knowledge of ISO 27001, Cyber Essentials+ Information Security Management Systems (ISMS)
• Strong attention to detail, with a high level of integrity and ability to handle confidential information
• Well‑organised and structured approach to managing tasks and priorities
• Ability to communicate effectively with stakeholders at all levels, including confidence to elevate issues where necessary
• Proactive, forward‑thinking mindset with an interest in using technology to improve processes
• Collaborative team player with the ability to work across multiple functions
• Strong written and verbal communication skills,

Qualification:

• Education : Bachelor's degree (or higher) in a related discipline
• Certification : - Certifications in Information Security Management such as CISSP/CISM/CISA, ISO 27001 or equivalent
• Previous experience in the information security domain