GRC Information Security Analyst

hireful; City Of London; Hybrid; GBP 60,000 - 65,000; Full time

Job summary

A global software technology company is seeking an experienced GRC Information Security Analyst to join their team in Central London. This role offers a hybrid workplace with flexible remote options while managing compliance with ISO standards and engaging with auditors. Candidates should have a strong understanding of GRC Security, relevant compliance regulations, and excellent stakeholder management skills. Competitive salary of GBP60K–GBP65K plus a bonus and benefits.

Benefits

10% Bonus

Excellent benefits package

Flexible work arrangements

Qualifications

• Experience with GRC Security and compliance regulations.
• Knowledge of cloud environments and security compliance tools.
• Experience in stakeholder management directly reporting to a director.

Responsibilities

• Engage with external auditors and manage compliance regulations.
• Maintain and achieve compliance with DPA and GDPR.
• Communicate effectively with internal and external stakeholders.

Skills

Knowledge of ISO 27001

Knowledge of PCI DSS

Knowledge of SOC2

Knowledge of NIST

Understanding of DPA and GDPR

Strong communication skills

Stakeholder management

Tools

AWS

Azure

Windows

Linux

Job description

Are you looking to join a global software technology company, with their main base of operations here, in the UK, as an experienced GRC Information Security Analyst?

Do you have experience in the GRC Security space with audits, auditors, ISO27001, PCI DSS, SOC2, NIST & current compliance regulations?

If so & you are looking to expand your information Security career, meet new team members, embrace new challenges & join a world–class team we d like to hear from you!

Job title: GRC Information Security Analyst. Global Technology company.

Salary: GBP60K – GBP65K Basic range + 10% Bonus + Excellent benefits package

Location: Central London office. We offer a hybrid workplace, with a LOT of flexibility for remote. However, due to the nature of the role; dealing with external auditors & internal departments, we have put, roughly, 1–2 days per week on this, in office. Some weeks, it may be zero though! Some weeks, it may be 3 days flexibility is key.

If you re an experienced GRC Security Analyst, you ll already know what the role will entail, but see below for things we ll need to see in order to be considered:

• Knowledge and experience of ISO 27001, PCI DSS, SOC2, NIST and CIS benchmarking is essential.
• Knowledge and experience achieving and maintaining compliance with relevant legislation, such as DPA, GDPR
• Knowledge of cloud environments (AWS, Azure) & Windows, &/or Linux environments (To be clear: this is NOT a technical, hands–on role. We have a separate security engineering team for that )

Things we d love to see, but are not needed to be considered (& you ll get experience in by joining us):

• IT Security Risk & Compliance automated tooling: Drata, Vanta, One Trust or another.
• If you come with CISA or Lead Auditor certifications, then that would be handy!

Reporting directly to the IT Security GRC Director, you ll need strong communications & internal / external stakeholder management skills.

If all the above sounds of interest & you d like to find out more, please do apply now, or get in touch for a confidential discussion.