GRC Security Analyst | ISO 27001 | Hybrid London

Circle Recruitment; Greater London; Hybrid; GBP 30.000 - 45.000; Vollzeit

Zusammenfassung

Circle Recruitment is seeking an experienced Information Security GRC Analyst to support Governance, Risk and Compliance services for a leading organisation in London. The role is a 6-month contract, with FTC salary options or daily rate, hybrid work two days in the office and the rest remote.

The successful candidate will engage with senior stakeholders, technology teams and security leadership to strengthen cyber security posture through risk management, compliance assurance and security

Qualifikationen

• 3–5 years' experience in information security, cyber security, GRC, IT audit or risk management.
• Experience in security risk assessments, control reviews and audits.
• Knowledge of ISO 27001, NIST CSF and Cyber Essentials.

Aufgaben

• Support GRC activities aligned with ISO 27001, NIST CSF, Cyber Essentials and GovAssure.
• Conduct information security risk assessments across business processes, projects, technology platforms and third-party suppliers.
• Maintain risk registers, track remediation actions and support cyber risk management.
• Produce security policies, standards, assessment reports, compliance evidence and executive reporting.
• Support audits, control reviews, assurance and compliance assessments.
• Engage stakeholders, facilitate workshops and gather evidence to support security initiatives.
• Contribute to supplier assurance and third-party risk management.
• Improve security governance processes and controls.
• Support security best practices, data governance and Secure by Design principles across operational, recovery and transformation workstreams.

Kenntnisse

Information security

Cyber security

GRC

IT audit

Risk management

Jobbeschreibung

Circle Recruitment is seeking an experienced Information Security GRC Analyst to support Governance, Risk and Compliance services for a leading organisation in London. The role is a 6-month contract, with FTC salary options or daily rate, hybrid work two days in the office and the rest remote.

The successful candidate will engage with senior stakeholders, technology teams and security leadership to strengthen cyber security posture through risk management, compliance assurance and security