Information Security & GRC Lead

Form3; Greater London; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

A technology firm in Greater London is seeking an experienced Information Security Officer to enhance its security governance, risk, and compliance practices. The role involves applying extensive security framework knowledge, conducting audits, and fostering a strong security culture. Candidates should have at least 5 years in Information Security and relevant certifications. The position requires a collaborative mindset with excellent communication skills, allowing for impactful engagement across teams. This is primarily an on-site role with some remote flexibility.

Benefits

Flexible working arrangements

Commuting support

Professional development opportunities

Qualifications

• Proven experience developing, implementing, and improving information security policies.
• Hands-on experience with audits and risk assessments.
• Strong working knowledge of ISO and NIST frameworks.

Responsibilities

• Apply expert knowledge of security frameworks to support governance.
• Support ISMS and BCMS development.
• Monitor adherence to security controls via risk assessments.

Skills

Analytical mindset

Strong communication skills

Stakeholder engagement

Hands-on experience in audits

Experience with vulnerability management

Education

5 years in Information Security

Security certifications (CISSP, CISM, CISA)

Tools

GRC tooling

ISO27001 framework

NIST framework

Job description

A technology firm in Greater London is seeking an experienced Information Security Officer to enhance its security governance, risk, and compliance practices. The role involves applying extensive security framework knowledge, conducting audits, and fostering a strong security culture. Candidates should have at least 5 years in Information Security and relevant certifications. The position requires a collaborative mindset with excellent communication skills, allowing for impactful engagement across teams. This is primarily an on-site role with some remote flexibility.