GRC Analyst

JR United Kingdom; City Of London; On-site; GBP 40,000 - 60,000; Full time

Job summary

A leading consultancy in the UK is seeking a GRC Analyst to support the GRC Manager in evaluating security risks and enhancing governance frameworks. The role involves developing risk mitigation strategies and ensuring compliance with various regulations, including ISO 27001 and GDPR. Candidates should possess relevant degrees or certifications and have a solid understanding of the legal/security landscape in the housing sector.

Qualifications

• Degree or relevant certifications in IT/security.
• Experience in risk assessments and compliance frameworks.
• Knowledge of regulations like ISO 27001 and GDPR.

Responsibilities

• Assess, document, and communicate information security risks.
• Develop and implement risk mitigation plans.
• Coordinate audits (internal and external).

Skills

Information Security Risk Assessment

Governance Framework Development

Risk Management

Compliance Monitoring

Education

Degree in Computer Science/IT

CISA Certification

CRISC Certification

ISO 27001 Lead Auditor/Implementer

Job description

Social network you want to login/join with:

iO Associates have collaborated with our consultancy division to help in their search for a GRC Analyst.

You will support the GRC Manager in identifying and evaluating security risks, strengthening the organisation's governance framework, and ensuring alignment with relevant industry regulations and standards.
Key Responsibilities:

• Assess, document, and communicate information security risks
• Develop and implement risk mitigation plans
• Maintain and evolve governance and compliance frameworks
• Monitor compliance against standards and regulations like ISO 27001, NIST, GDPR
• Coordinate audits (internal and external)

Requirements:

• Degree in Computer Science/ IT or relevant industry certifications such as CISA, CRISC, CISMP, ISO 27001 Lead Auditor/Implementer
• Working knowledge with legal/security needs in housing association sector and its regulatory environment
• Solid grasp of ISO 27001, NIST, GDPR, and risk management frameworks
• Experience with risk assessments and developing mitigation plans
• Experience producing internal audits, reports, gap analyses
• Experience maintaining compliance with frameworks like ISO 27001, PCI-DSS

If you are interested, please apply immediately as first stage interviews will be taking place next week.

Alternatively, feel free to reach me directly on h.barmi @ ioassociates . co . uk.