Information Security GRC Specialist

identifi Global Resources; Greater London; On-site; GBP 50,000 - 65,000; Full time

Job summary

A leading company is seeking an Information Security GRC Specialist to join their team. This role involves protecting information assets by implementing governance practices and assessing compliance with industry standards like ISO27001. Ideal candidates will have significant experience in information security, strong communication skills, and relevant certifications. This full-time position offers a competitive salary, making a meaningful impact on security culture in a dynamic environment.

Qualifications

• Extensive experience in information security within a GRC role is crucial.
• Strong understanding of security risks and compliance standards is required.
• Experience in delivering risk assessments against ISO27001 and similar.

Responsibilities

• Protect information assets by embedding governance practices.
• Assess risk and ensure compliance with standards like ISO27001.
• Act as a trusted security advisor across the business.

Skills

Understanding of threat landscape

Risk assessment

Compliance standards

Security policies

Communication skills

Problem-solving skills

Education

CISSP Certification

CISA Certification

CRISC Certification

Tools

ISO27001

ISF

NIST

ITIL

Job description

identifi Global Resources provided pay range

This range is provided by identifi Global Resources. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

INFORMATION SECURITY GRC SPECIALIST

Contract: Permanent

Salary: Up to £65,000 + BONUS

Reports to: GRC Manager

Are you a security governance expert looking to play a crucial role in an evolving and high-impact environment? We are seeking an Information Security GRC Specialist to join our InfoSec Governance, Risk and Compliance (GRC) team.

In this role, you’ll help protect the confidentiality, integrity, and availability of our information assets by embedding best-in-class governance practices, assessing risk, and ensuring compliance with key industry standards like ISO27001. You'll work across the business as a trusted security advisor, helping teams understand and manage their risk profile and compliance obligations.

What You’ll Bring

• A strong understanding of the current threat landscape, security risks, and compliance standards.
• Extensive experience in information security, ideally within a GRC or risk management role.
• Experience delivering risk assessments and managing compliance against standards like ISO27001.
• Skilled in writing and implementing security policies, standards, and procedures.
• Working knowledge of frameworks such as ISF, NIST, ISO, and ITIL.
• Excellent communication skills with the ability to convey risk in accessible, business-friendly terms.
• Strong prioritisation and problem-solving skills under pressure.

Desirable Certifications

CISSP – Certified Information Systems Security Professional

CISA – Certified Information Systems Auditor

CRISC – Certified in Risk and Information Systems Control

Why Join?

You’ll play a pivotal role in shaping the security culture and risk posture of the organisation while working in a collaborative, forward-thinking environment. If you’re ready to bring your GRC expertise to a role that truly makes a difference—we want to hear from you.

Apply now and help build a secure, resilient future.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology and Quality Assurance

• Industries

  Insurance, Financial Services, and Computer and Network Security

Referrals increase your chances of interviewing at identifi Global Resources by 2x

Sign in to set job alerts for “Information Security Specialist” roles.

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.