Hybrid ISMS & Security GRC Analyst

RSM UK; Stoke-on-Trent; Hybrid; GBP 35,000 - 52,000; Full time

Benefits offered by this job

Hybrid and Flexible working

26 Days Holiday

Wellbeing benefits and tools

Access to 300+ training courses

Job summary

RSM UK is seeking an Information Security GRC Analyst to support the Information Security Management System (ISMS) and help develop and deliver the firm’s security training and awareness program.

You will contribute to governance, risk and compliance activities, promote good security behaviours, and help ensure policy adherence across the firm. The role emphasizes collaboration with the security team and business units to mitigate risks.

Qualifications

• Experience in information security governance, risk management and compliance activities.
• Ability to write clear policies, processes and communications for varied audiences.
• Experience supporting information security awareness campaigns and training.
• Familiarity with supplier due diligence and third-party risk.
• Experience administering or supporting an ISMS (e.g., ISO 27001).

Responsibilities

• Support ongoing operation, maintenance and improvement of the ISMS.
• Develop and deliver information security training and awareness programmes.
• Assist with policy, standard, process and procedure documentation.
• Support ISO 27001 certification activities and audit evidence collection.
• Support risk management activities and control remediation tracking.
• Assist with supplier assurance and due diligence reviews.
• Create engaging awareness content and deliver training sessions.

Skills

Information security

GRC

Policy writing

Awareness campaigns

Supplier assurance

Job description

RSM UK is seeking an Information Security GRC Analyst to support the Information Security Management System (ISMS) and help develop and deliver the firm’s security training and awareness program.

You will contribute to governance, risk and compliance activities, promote good security behaviours, and help ensure policy adherence across the firm. The role emphasizes collaboration with the security team and business units to mitigate risks.