GRC & ISMS Analyst – UK Security (Bristol, 2 days)

Clue Computing Co.; West of England; Hybrid; GBP 60,000 - 70,000; Full time

Job summary

Clue is seeking a Security Governance, Risk and Compliance Analyst to maintain our ISO 27001 ISMS, manage the risk register, and lead customer security assurance. You will coordinate incident records and drive evidence collection while aligning with CISO direction across IT operations, security engineering and the product teams.

The role is based in the UK with hybrid working, including a Bristol office presence two days per week, and involves engagement with Legal, DPO, and multiple business

Qualifications

• Experience in operating ISO 27001 ISMS, including maintenance and audits.
• Ability to manage risk registers, risk treatment and executive reporting.
• Proven ability to lead customer security assurance and due diligence.

Responsibilities

• Administer ISO 27001 ISMS day to day and maintain evidence library.
• Lead risk register management and monthly review with exec sponsors.
• Coordinate incident records, notifications and post-incident actions.
• Oversee supplier security assessments and CCS/G-Cloud evidence maintenance.

Skills

ISO 27001

Risk management

Stakeholder mgmt

Incident coordination

Tools

SIEM

Vulnerability management

TPRM platform

Job description

Clue is seeking a Security Governance, Risk and Compliance Analyst to maintain our ISO 27001 ISMS, manage the risk register, and lead customer security assurance. You will coordinate incident records and drive evidence collection while aligning with CISO direction across IT operations, security engineering and the product teams.

The role is based in the UK with hybrid working, including a Bristol office presence two days per week, and involves engagement with Legal, DPO, and multiple business