Hybrid Information Security GRC Analyst: Impact & Compliance

Cygnet; Birmingham; Hybrid; GBP 45,000 - 52,000; Full time

Benefits offered by this job

25 days annual leave

Bank holidays

Fully paid training

Paid DBS

Discount scheme (800+ retailers)

NHS Discount (Blue Light Card)

Cycle to Work scheme

Opportunities to progress

Job summary

Cygnet is seeking an experienced Information Security GRC Analyst to join our team on a full-time, permanent basis. The role is hybrid, 40 hours across 5 days, with travel to central offices for monthly team meetings.

You will support the delivery and continual improvement of the organisation’s GRC framework, providing governance, risk management, regulatory compliance, audit and assurance activities across the security function.

Qualifications

• Experience in information security governance, risk management and regulatory compliance.
• Proven ability to manage audits and assurance activities.
• Experience supporting NHS DSPT and ISO/IEC 27001 would be advantageous.

Responsibilities

• Support the Head of Information Security in delivering the GRC programme.
• Develop and improve the ISMS and security controls.
• Assist ISO 27001 certification roadmaps and alignment with CE+ and DSPT.
• Translate regulatory requirements into practical controls and improvement plans.
• Collaborate with stakeholders across functions and with third parties.

Skills

Information security governance

Risk management

Regulatory compliance

Audit and assurance

GRC tooling

Job description

Cygnet is seeking an experienced Information Security GRC Analyst to join our team on a full-time, permanent basis. The role is hybrid, 40 hours across 5 days, with travel to central offices for monthly team meetings.

You will support the delivery and continual improvement of the organisation’s GRC framework, providing governance, risk management, regulatory compliance, audit and assurance activities across the security function.