Information Security & GRC Consultant—OneTrust

Oyster Ims; Greater London; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

Oyster IMS is seeking an Information Security Analyst to join our Information Security team in Greater London. The role blends information security and GRC consultancy with hands-on configuration of the OneTrust platform.

You will help clients understand and manage information security risks, implement controls and derive real value from GRC technology. The position involves working across client engagements and maintaining our own security practices.

Qualifications

• Experience delivering information security and GRC engagements.
• Ability to translate client requirements into practical, proportionate solutions.
• Experience with ISO 27001 and information security controls.
• Familiarity with OneTrust configurations and implementations.

Responsibilities

• Support delivery of client information security, GRC, IT risk management and third party risk engagements.
• Assist with implementing and operating ISO 27001 ISMS for clients.
• Translate client issues into practical, proportionate solutions.
• Develop and maintain information security policies, controls and procedures.
• Provide clear information security, risk and GRC advice to technical and non-technical stakeholders.
• Deliver training and education on information security topics.
• Configure and implement OneTrust GRC solutions to meet client requirements.
• Support IT risk management and third party risk management through OneTrust.
• Conduct supplier security reviews and third-party risk assessments.
• Carry out ISMS reviews, audits and spot checks.

Skills

Information Security

GRC

ISO 27001

OneTrust

Risk Management

Tools

OneTrust

Job description

Oyster IMS is seeking an Information Security Analyst to join our Information Security team in Greater London. The role blends information security and GRC consultancy with hands-on configuration of the OneTrust platform.

You will help clients understand and manage information security risks, implement controls and derive real value from GRC technology. The position involves working across client engagements and maintaining our own security practices.