GRC Analyst

Oliver James Associates Ltd.; London; On-site; GBP 40,000 - 60,000; Full time

Job summary

Une entreprise de premier plan recherche un GRC Analyst pour soutenir le responsable. Vous serez responsable d'évaluer, communiquer et gérer les risques liés à la sécurité de l'information. Ce poste nécessitera une expertise en gouvernance et conformité avec les principales réglementations telles que ISO 27001 et GDPR.

Qualifications

• Expérience avérée en sécurité de l'information, risque ou gouvernance.
• Compréhension des normes et réglementations comme ISO 27001, NIST, GDPR.
• Confiance en rédaction de rapports et documentation.

Responsibilities

• Identifier et documenter les risques de sécurité.
• Maintenir les cadres de gouvernance et de risque.
• Surveiller la conformité avec les politiques de sécurité.

Skills

Information Security

Risk Management

Governance

Communication

Job description

Oliver James has partnered with a industry leader who are currently looking for a GRC Analyst to join the team.

Your role is to support the Information Security GRC Manager in understanding, evaluating, and communicating information security risks ensuring the security posture aligns with compliance and regulatory obligations. Improving and maintaining the information security governance and risk frameworks to ensure compliance with relevant standards and regulations.

Experience Required:

• Proven experience in information security, risk, or governance.

• Solid understanding of key security frameworks and regulations like ISO 27001, NIST, and GDPR.

• Familiar with risk assessments, mitigation strategies, and creating action plans.

• Confident in writing reports and documentation such as audits, assessments, and gap analyses.

• Experienced in tracking and ensuring compliance with standards like ISO 27001 and PCI-DSS.

• Strong communicator, able to work effectively with stakeholders at all levels.

Key Responsibilities include:

• Identify, document, and communicate security risks, and help create strategies to manage them.

• Maintain and improve security governance and risk frameworks.

• Monitor compliance with security policies, standards, laws, and regulations.

• Coordinate both internal and external security audits.

• Evaluate risks related to vendors, partners, and suppliers.

• Share security policies and regulatory requirements across the business.