GRC Information Security Analyst — ISO 27001 & Risk

Global Banking School; City Of London; On-site; GBP 40,000 - 43,000; Full time

Benefits offered by this job

33 days annual leave

Career development support

Pension scheme

Flexible benefits

Discounts and EAP

Annual bonus

Job summary

Global Banking School is seeking an Information Security GRC professional to join our IT Infrastructure team in West London. You will perform risk assessments, support ISO 27001 implementation, and manage GRC reporting to senior management.

With 5+ years in information security and strong knowledge of ISO 27001, you will translate security risk into business terms and drive continuous improvement across the GEDU Group.

Qualifications

• Proven experience implementing ISO 27001 compliance and Business Continuity/ITDR.
• Experience with Governance Risk Compliance (GRC) and GRC reporting.
• 5+ years in Information Security, Risk and IT.
• Ability to translate technical security issues into business risk.

Responsibilities

• Perform risk assessments in line with security best practice and policies.
• Support IS Manager in maintaining risk register and monthly reporting to Senior Management.
• Assist ISO 27001 implementation across GBS and GEDU Group.
• Develop corrective action plans with stakeholders to reduce risk to acceptable levels.
• Update and review information security policies and provide training as needed.
• Maintain compliance with external regulatory requirements and track audit findings.

Skills

ISO-27001 implementation

GRC reporting

5+ years information security

risk assessments

business risk translation

Education

Bachelor's degree in information technology or related field

Job description

Global Banking School is seeking an Information Security GRC professional to join our IT Infrastructure team in West London. You will perform risk assessments, support ISO 27001 implementation, and manage GRC reporting to senior management.

With 5+ years in information security and strong knowledge of ISO 27001, you will translate security risk into business terms and drive continuous improvement across the GEDU Group.