GRC Analyst

TMX Group; Greater London; Hybrid; GBP 35,000 - 50,000; Full time

Job summary

TMX Group in the United Kingdom seeks a GRC/InfoSec Analyst to help implement and monitor security controls, align with ISO27001, and support GDPR/DORA compliance. This non-technical role offers growth in governance, risk, and cybersecurity knowledge while working with stakeholders across the business.

You will champion security awareness, assist with policy maintenance, coordinate audits, track risk actions, and produce dashboards.

Qualifications

• 1–2 years of experience in a GRC or Information Security Analyst role.
• Familiarity with ISO27001 or other security standards and frameworks like SOC or NIST is advantageous but not required.
• Strong interpersonal and communication skills; ability to simplify complex issues for stakeholders at all levels.
• Self-motivated with a genuine passion for learning more about Cybersecurity.

Responsibilities

• Champion Information Security awareness across the organization through campaigns, training sessions, and news bulletins.
• Assist in maintenance and update of security policies within the ISMS with the InfoSec management team.
• Coordinate and manage logistics for internal and external audits.
• Support compliance assessments and audits with relevant stakeholders.
• Identify opportunities for continuous improvement in security practices and processes.
• Review and track risk actions with owners for timely updates.
• Monitor Information Security incidents and ensure accurate reporting.
• Produce reports, metrics, and dashboards to evaluate security controls.

Skills

GRC knowledge

Information Security

Audits coordination

Policy maintenance

Stakeholder communication

Analytical thinking

Attention to detail

Job description

The Role We are seeking an individual eager to expand their expertise in Governance, Risk, and Compliance (GRC). This role supports the GRC team in safeguarding company data and operations by helping to implement, monitor, and enhance security controls. You will collaborate closely with stakeholders and cross-functional teams to ensure compliance with key security frameworks such as ISO27001, as well as regulations like DORA and GDPR. While this position is not technical, it offers an excellent opportunity for someone looking to grow their GRC skills and expand their knowledge in Cybersecurity.Key Responsibilities:● Champion Information Security awareness across the organization through initiatives such ascybersecurity awareness campaigns, annual training sessions, and regular InfoSec news bulletins.● Assist in the maintenance and update of security policies within the Information Security ManagementSystem (ISMS) alongside the InfoSec management team.● Coordinate and manage logistics for both internal and external audits.● Support compliance assessments and audits, ensuring effective engagement with relevant stakeholders.● Identify opportunities for continuous improvement in security practices and processes.● Review and track risk actions, working with owners to ensure timely updates.● Monitor Information Security Incidents, liaising with incident handlers to ensure accurate and timelyreporting.● Produce reports, metrics, and dashboards to evaluate and report on the effectiveness of security controls. The Ideal Person:● 1-2 years of experience in a GRC or Information Security Analyst role.● Familiarity with ISO27001 or other security standards and frameworks like SOC or NIST is advantageousbut not required.● Strong interpersonal and communication skills, with the ability to simplify complex issues for stakeholdersat all levels.● Self-motivated, with a genuine passion for learning more about Cybersecurity.● A proactive problem-solver with a keen eye for detail.