GRC/ISMS Analyst — Security & Awareness Leader

RSM UK Group LLP; City Of London; Hybrid; GBP 52,000 - 66,000; Full time

Benefits offered by this job

Hybrid and Flexible working

26 Days Holiday

Wellbeing and development benefits

Job summary

RSM UK is seeking an Information Security GRC Analyst to support the ongoing operation, maintenance and continual improvement of the ISMS and to help develop the firm's information security training program. The role blends governance, risk and compliance with practical awareness activities to ensure colleagues understand security responsibilities.

You will help with policy development, certification activities and audits, while also assisting with risk management and supplier due diligence to

Qualifications

• Experience in information security, GRC, risk, compliance or assurance role.
• Understanding of information security governance, risk management and control assurance.
• Experience writing policy, process or procedural documentation.
• Experience supporting information security awareness campaigns.
• Awareness of supplier assurance or third-party due diligence processes.

Responsibilities

• Support ISMS maintenance and continual improvement.
• Develop and maintain information security policies and procedures.
• Support ISO 27001 and other relevant certification activities, including evidence gathering and audits.
• Assist with internal information security audits and control assessments.
• Support information security risk management activities and risk documentation.
• Conduct supplier assurance activities and due diligence reviews.
• Collaborate with training teams to create engaging awareness content and e-learning modules.
• Plan, schedule and deliver regular awareness sessions and phishing simulations.
• Monitor training effectiveness using metrics and feedback.

Skills

Information security

GRC

Risk management

Compliance

Policy documentation

Training & awareness

Phishing simulations

Supplier assurance

Job description

RSM UK is seeking an Information Security GRC Analyst to support the ongoing operation, maintenance and continual improvement of the ISMS and to help develop the firm's information security training program. The role blends governance, risk and compliance with practical awareness activities to ensure colleagues understand security responsibilities.

You will help with policy development, certification activities and audits, while also assisting with risk management and supplier due diligence to