GRC Cybersecurity Analyst — ISO 27001 & Risk Compliance

VPN Global; Altrincham; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

VPN Global Testing Services Ltd. is seeking a Cybersecurity GRC Analyst with 3+ years of experience to contribute to our ISO 27001 ISMS and risk management program in the UK. You will support audits, maintain documentation, and collaborate with teams to strengthen security controls.

Ideal candidates have hands-on ISO 27001 knowledge, familiarity with Cyber Essentials+, and strong communication skills for cross-functional engagement across the business.

Qualifications

• Experience in risk, information security, compliance or internal audit in a professional services setting.
• Knowledge of ISO 27001 and Cyber Essentials+ ISMS.
• Strong attention to detail and integrity handling confidential information.
• Organised and structured approach to tasks and priorities.
• Excellent communication with stakeholders at all levels.
• Proactive, forward-thinking mindset and interest in using technology to improve processes.
• Collaborative across multiple functions with strong written and verbal communication.
• Bachelor's degree (or higher) in a related field; relevant certifications preferred (CISSP/CISM/CISA, ISO 27001).

Responsibilities

• Establish and maintain the ISMS in line with ISO 27001.
• Assist with ISO 27001 audits: preparation, evidence gathering, follow-up actions.
• Monitor compliance with internal policies and track non-conformities.
• Maintain ISMS documentation: asset registers, risk assessments, and Statements of Applicability (SoA).
• Provide support on third-party security and supplier risk assessments.
• Contribute to enterprise risk assessments and remediation tracking.
• Assist with control testing and compliance reviews across the business.
• Respond to regulatory queries and support compliance processes across the business.
• Collaborate with teams across the business to promote information security practices.

Skills

Risk management

ISO 27001 knowledge

Confidentiality

Organisation

Stakeholder communication

Proactive mindset

Cross-functional collaboration

Written and verbal communication

Education

Bachelor's degree or higher

CISSP/CISM/CISA or ISO 27001 certifications

Job description

VPN Global Testing Services Ltd. is seeking a Cybersecurity GRC Analyst with 3+ years of experience to contribute to our ISO 27001 ISMS and risk management program in the UK. You will support audits, maintain documentation, and collaborate with teams to strengthen security controls.

Ideal candidates have hands-on ISO 27001 knowledge, familiarity with Cyber Essentials+, and strong communication skills for cross-functional engagement across the business.