Hybrid ISMS & GRC Security Analyst

RSM UK; Greater London; Hybrid; GBP 38,000 - 60,000; Full time

Benefits offered by this job

Hybrid and Flexible working

26 Days Holiday

Wellbeing & health benefits including

Access to 300+ courses on demand

Job summary

RSM UK is seeking an Information Security GRC Analyst to support the ISMS and contribute to building a culture of security across the firm. You will help develop policies, run governance activities and assist with audits and supplier due diligence.

You will also support security awareness initiatives, deliver training content and coordinate phishing simulations, while working with the wider Information Security Team to improve controls and compliance with standards.

Qualifications

• Experience in information security, GRC, risk, compliance or assurance role.
• Good understanding of information security governance, risk management and control assurance.
• Experience supporting policy, process or procedural documentation for diverse audiences.
• Experience supporting information security awareness, training or communications campaigns.
• Awareness of supplier assurance, third‑party due diligence or client security questionnaire processes.

Responsibilities

• Support day-to-day management, maintenance and improvement of the ISMS.
• Assist with development and maintenance of information security policies and standards.
• Support ISO 27001 and other certification activities, including evidence gathering and audit prep.
• Assist internal information security audits and control assessments to evaluate controls.
• Support information security risk management activities including risk treatment tracking.
• Conduct supplier assurance activities and due diligence reviews.
• Collaborate with in-house training to create awareness content and e-learning modules.
• Plan, schedule and deliver regular awareness sessions, workshops and briefings.
• Manage phishing simulations and follow-up communications and learning.
• Monitor training effectiveness using feedback and metrics to identify improvements.

Skills

Information security

GRC

Risk management

Compliance

Policy writing

Awareness campaigns

Supplier assurance

Job description

RSM UK is seeking an Information Security GRC Analyst to support the ISMS and contribute to building a culture of security across the firm. You will help develop policies, run governance activities and assist with audits and supplier due diligence.

You will also support security awareness initiatives, deliver training content and coordinate phishing simulations, while working with the wider Information Security Team to improve controls and compliance with standards.