Information Security GRC Analyst

Circle Recruitment; Greater London; Hybrid; GBP 30,000 - 45,000; Full time

Job summary

Circle Recruitment is seeking an experienced Information Security GRC Analyst to support Governance, Risk and Compliance services for a leading organisation in London. The role is a 6-month contract, with FTC salary options or daily rate, hybrid work two days in the office and the rest remote.

The successful candidate will engage with senior stakeholders, technology teams and security leadership to strengthen cyber security posture through risk management, compliance assurance and security

Qualifications

• 3–5 years' experience in information security, cyber security, GRC, IT audit or risk management.
• Experience in security risk assessments, control reviews and audits.
• Knowledge of ISO 27001, NIST CSF and Cyber Essentials.

Responsibilities

• Support GRC activities aligned with ISO 27001, NIST CSF, Cyber Essentials and GovAssure.
• Conduct information security risk assessments across business processes, projects, technology platforms and third-party suppliers.
• Maintain risk registers, track remediation actions and support cyber risk management.
• Produce security policies, standards, assessment reports, compliance evidence and executive reporting.
• Support audits, control reviews, assurance and compliance assessments.
• Engage stakeholders, facilitate workshops and gather evidence to support security initiatives.
• Contribute to supplier assurance and third-party risk management.
• Improve security governance processes and controls.
• Support security best practices, data governance and Secure by Design principles across operational, recovery and transformation workstreams.

Skills

Information security

Cyber security

GRC

IT audit

Risk management

Job description

Information Security GRC Analyst

6 Months

GBP45k FTC or GBP450/Day Inside IR35

London

We are seeking an experienced Information Security GRC Analyst to support the delivery of Governance, Risk and Compliance (GRC) services for a leading organisation.

The Information Security GRC Analyst role will be an initial 6 month contract, and can be offered as either a FTC with a salary of between GBP30 - GBP45k, or day rate contract between GBP350 - GBP450/Day Inside IR35 on an umbrella solution. The role is based in London and will be office based 2 days per week and the remainder remote.

You will work with senior stakeholders, technology teams and security leadership to strengthen the organisation's cyber security posture through risk management, compliance assurance and security governance. This role suits a security professional who can provide practical, risk-based advice in a client-facing environment.

Key Responsibilities

• Support GRC activities aligned with ISO 27001, NIST Cybersecurity Framework, Cyber Essentials and GovAssure.
• Conduct information security risk assessments across business processes, projects, technology platforms and third-party suppliers.
• Maintain risk registers, track remediation actions and support cyber risk management.
• Produce security policies, standards, assessment reports, compliance evidence and executive reporting.
• Support audits, control reviews, assurance and compliance assessments.
• Engage stakeholders, facilitate workshops and gather evidence to support security initiatives.
• Contribute to supplier assurance and third-party risk management.
• Improve security governance processes and controls.
• Support security best practices, data governance and Secure by Design principles across operational, recovery and transformation workstreams.

Essential skills

• 3-5 years' experience in Information Security, Cyber Security, GRC, IT Audit or Risk Management.
• Experience in security risk assessments, control reviews and audit or compliance activities.
• Strong understanding of security governance, risk management and ISO 27001.
• Familiarity with NIST Cybersecurity Framework and Cyber Essentials.
• Strong stakeholder engagement, communication, report writing and presentation skills.
• Ability to communicate security concepts to technical and non-technical audiences.

Desirable

• Experience in government, public sector, regulated or enterprise environments.
• Knowledge of GovAssure and public sector security requirements.
• Familiarity with Microsoft Azure and AWS.
• Experience with GRC platforms and risk management tools.
• Understanding of Secure by Design and security architecture principles.

Certifications

One or more of the following would be advantageous:

• ISO 27001 Lead Implementer or Lead Auditor
• Security+
• CGRC
• CISA
• CRISC
• CISSP / Associate CISSP

Information Security GRC Analyst, Information Security Analyst, Information Security GRC Analyst , Security Analyst, Information Security GRC Analyst , GRC Analyst, Information Security GRC Analyst, ISO27001, Azure, AWS, NIST, Cyber essentials, analyst, Information Security, GRC, IT audits, Risk Management