GRC Analyst: Elevate Security & Compliance Skills

TMX Group

Greater London

Hybrid

GBP 35,000 - 50,000

Full time

4 days ago

Be an early applicant

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Job summary

TMX Group in the United Kingdom seeks a GRC/InfoSec Analyst to help implement and monitor security controls, align with ISO27001, and support GDPR/DORA compliance. This non-technical role offers growth in governance, risk, and cybersecurity knowledge while working with stakeholders across the business.

You will champion security awareness, assist with policy maintenance, coordinate audits, track risk actions, and produce dashboards.

Qualifications

1–2 years of experience in a GRC or Information Security Analyst role.
Familiarity with ISO27001 or other security standards and frameworks like SOC or NIST is advantageous but not required.
Strong interpersonal and communication skills; ability to simplify complex issues for stakeholders at all levels.
Self-motivated with a genuine passion for learning more about Cybersecurity.

Responsibilities

Champion Information Security awareness across the organization through campaigns, training sessions, and news bulletins.
Assist in maintenance and update of security policies within the ISMS with the InfoSec management team.
Coordinate and manage logistics for internal and external audits.
Support compliance assessments and audits with relevant stakeholders.
Identify opportunities for continuous improvement in security practices and processes.
Review and track risk actions with owners for timely updates.
Monitor Information Security incidents and ensure accurate reporting.
Produce reports, metrics, and dashboards to evaluate security controls.