GRC Analyst

JR United Kingdom; London; On-site; GBP 40,000 - 60,000; Full time

Job summary

A leading consultancy in the UK is seeking a GRC Analyst to support the GRC Manager in identifying security risks and ensuring compliance with industry standards. You will be responsible for assessing risks, developing mitigation plans, and maintaining governance frameworks. Ideal candidates will hold a degree in Computer Science or relevant certifications and have experience in risk management and compliance monitoring.

Qualifications

• Degree in Computer Science or relevant certifications.
• Knowledge of ISO 27001, NIST, GDPR.
• Experience with risk assessments and compliance monitoring.

Responsibilities

• Assess, document, and communicate information security risks.
• Develop and implement risk mitigation plans.
• Monitor compliance against standards and regulations like ISO 27001, NIST, GDPR.

Skills

Risk Management

Information Security

Compliance Monitoring

Education

Degree in Computer Science/IT

CISA Certification

ISO 27001 Lead Auditor/Implementer

CRISC Certification

CISMP Certification

Job description

Social network you want to login/join with:

iO Associates have collaborated with our consultancy division to help in their search for a GRC Analyst.

You will support the GRC Manager in identifying and evaluating security risks, strengthening the organisation's governance framework, and ensuring alignment with relevant industry regulations and standards.
Key Responsibilities:

• Assess, document, and communicate information security risks
• Develop and implement risk mitigation plans
• Maintain and evolve governance and compliance frameworks
• Monitor compliance against standards and regulations like ISO 27001, NIST, GDPR
• Coordinate audits (internal and external)

Requirements:

• Degree in Computer Science/ IT or relevant industry certifications such as CISA, CRISC, CISMP, ISO 27001 Lead Auditor/Implementer
• Working knowledge with legal/security needs in housing association sector and its regulatory environment
• Solid grasp of ISO 27001, NIST, GDPR, and risk management frameworks
• Experience with risk assessments and developing mitigation plans
• Experience producing internal audits, reports, gap analyses
• Experience maintaining compliance with frameworks like ISO 27001, PCI-DSS

If you are interested, please apply immediately as first stage interviews will be taking place next week.

Alternatively, feel free to reach me directly on h.barmi @ ioassociates . co . uk.