Information Security Analyst

RSM UK; Greater London; Hybrid; GBP 38,000 - 60,000; Full time

Benefits offered by this job

Hybrid and Flexible working

26 Days Holiday

Wellbeing & health benefits including

Access to 300+ courses on demand

Job summary

RSM UK is seeking an Information Security GRC Analyst to support the ISMS and contribute to building a culture of security across the firm. You will help develop policies, run governance activities and assist with audits and supplier due diligence.

You will also support security awareness initiatives, deliver training content and coordinate phishing simulations, while working with the wider Information Security Team to improve controls and compliance with standards.

Qualifications

• Experience in information security, GRC, risk, compliance or assurance role.
• Good understanding of information security governance, risk management and control assurance.
• Experience supporting policy, process or procedural documentation for diverse audiences.
• Experience supporting information security awareness, training or communications campaigns.
• Awareness of supplier assurance, third‑party due diligence or client security questionnaire processes.

Responsibilities

• Support day-to-day management, maintenance and improvement of the ISMS.
• Assist with development and maintenance of information security policies and standards.
• Support ISO 27001 and other certification activities, including evidence gathering and audit prep.
• Assist internal information security audits and control assessments to evaluate controls.
• Support information security risk management activities including risk treatment tracking.
• Conduct supplier assurance activities and due diligence reviews.
• Collaborate with in-house training to create awareness content and e-learning modules.
• Plan, schedule and deliver regular awareness sessions, workshops and briefings.
• Manage phishing simulations and follow-up communications and learning.
• Monitor training effectiveness using feedback and metrics to identify improvements.

Skills

Information security

GRC

Risk management

Compliance

Policy writing

Awareness campaigns

Supplier assurance

Job description

As one of the world's largest networks of audit, tax and consulting firms, RSM delivers big ideas and premium service to help middle-market businesses thrive. We are a fast-growing firm with big ambitions - we have a clear goal to become the premium adviser to the middle market, globally. This vision touches everything we do, motivating and inspiring us to become better every day. If you are looking for a firm where you can build a future and make an impact, then RSM is the place for you.

Make an Impact at RSM UK

The Information Security GRC Analyst will support the ongoing operation, maintenance and continual improvement of the Information Security Management System (ISMS), while also helping to develop and deliver the firm’s information security training and awareness programme.

The role combines governance, risk and compliance responsibilities with practical awareness activity to help colleagues understand their security responsibilities, embed good security behaviours and maintain compliance with relevant policies, standards and certification requirements.

• Supporting the day-to-day management, maintenance and continual improvement of the Information Security Management System (ISMS), working closely with the wider Information Security Team
• Assisting with the development, reviewing and maintaining of information security policies, standards, processes and procedures
• Supporting ISO 27001 and other relevant certification activities, including evidence gathering, audit preparation, control review and remediation tracking
• Assisting with internal information security audits and control assessments to evaluate the effectiveness of security controls and identify opportunities for improvement
• Supporting information security risk management activities, including risk assessments, risk treatment tracking and maintenance of relevant risk documentation
• Conducting supplier assurance activities, including due diligence reviews, assessment of new software and services, review of existing suppliers and participation in supplier visits where required
• Working closely with the in-house training team to create clear, engaging and interactive awareness content, including presentations, guidance materials and e-learning modules
• Support the planning, scheduling and delivery of regular awareness sessions, workshops and briefings on key security topics and good practice
• Managing and scheduling phishing simulation exercises, supporting follow-up communications, reporting and learning activities where required
• Monitoring the effectiveness of training and awareness activity, using feedback, completion data, phishing results and other metrics to identify improvement opportunities

What we are looking for

We value diverse experiences and perspectives. Here’s what we’re looking for in our ideal candidate:

• Relevant experience in an information security, GRC, risk, compliance or assurance role, including supporting or administering an ISMS.
• Good understanding of information security governance, risk management, compliance activities and control assurance.
• Experience supporting policy, process or procedural documentation, with the ability to write clearly for different audiences.
• Experience supporting information security awareness, training or communications campaigns.
• Awareness of supplier assurance, third-party due diligence or client security questionnaire processes.

What we can offer you

We recognise that our people are our most important assets. That’s why we offer a flexible reward and benefits package that will help you have fulfilling experience, both in and out of work.

• Hybrid and Flexible working
• 26 Days Holiday (with the option of purchasing additional days)
• Lifestyle, Health, and Wellbeing including financial wellbeing benefits such as financial tools, electric car scheme and access to a virtual GP
• Access to a suite of 300+ courses on demand developed by our inhouse Talent Development team

Diversity and Inclusion at RSM

At RSM, we want to create a strong sense of belonging so that people of all identities, backgrounds, and cultures feel they can bring their true self to work. Our clients come from all walks of life. We aim to achieve that same diversity of background, experience and perspective in our own teams, so that we can genuinely understand our client’s needs. Diverse teams bring a broader range of ideas and insights to work. That's why we're working together to ensure our firm's principles and processes support a firm culture that embraces difference and strengthens inclusion.

At RSM we work hard to create an environment where our people can make a difference - to themselves, their career, their teams, and to the success of our firm and clients. We support all our people to work flexibly, to manage their family and other responsibilities alongside their work commitments; we believe this is key to achieving an inspiring and fulfilling working environment.