Information Security GRC Specialist

JR United Kingdom; Greater London; On-site; GBP 55,000 - 65,000; Full time

Job summary

A prominent company is seeking an Information Security GRC Specialist to join its Governance, Risk, and Compliance team. You will play a critical role in enhancing the security governance practices while managing risk profiles and compliance. The successful candidate will possess strong expertise in risk assessments and a robust understanding of compliance standards like ISO27001. We invite seasoned security professionals to apply and contribute to building a secure future within a dynamic environment.

Qualifications

• Strong understanding of the current threat landscape, security risks, and compliance standards.
• Extensive experience in information security within a GRC or risk management role.
• Skilled in writing and implementing security policies and standards.

Responsibilities

• Help protect the confidentiality, integrity, and availability of information assets.
• Assess risk and ensure compliance with key industry standards like ISO27001.
• Serve as a trusted security advisor across the business.

Skills

Risk Management

Compliance

Security Governance

Problem Solving

Communication

Education

CISSP – Certified Information Systems Security Professional

CISA – Certified Information Systems Auditor

CRISC – Certified in Risk and Information Systems Control

Tools

ISO27001

NIST

ITIL

Job description

Social network you want to login/join with:

Information Security GRC Specialist, buckinghamshire

col-narrow-left

Client:

Location:

buckinghamshire, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

5

Posted:

31.05.2025

Expiry Date:

15.07.2025

col-wide

Job Description:

INFORMATION SECURITY GRC SPECIALIST

Contract: Permanent

Salary: Up to £65,000 + BONUS

Reports to: GRC Manager

Are you a security governance expert looking to play a crucial role in an evolving and high-impact environment? We are seeking an Information Security GRC Specialist to join our InfoSec Governance, Risk and Compliance (GRC) team.

In this role, you’ll help protect the confidentiality, integrity, and availability of our information assets by embedding best-in-class governance practices, assessing risk, and ensuring compliance with key industry standards like ISO27001. You'll work across the business as a trusted security advisor, helping teams understand and manage their risk profile and compliance obligations.

What You’ll Bring

• A strong understanding of the current threat landscape, security risks, and compliance standards.
• Extensive experience in information security, ideally within a GRC or risk management role.
• Experience delivering risk assessments and managing compliance against standards like ISO27001.
• Skilled in writing and implementing security policies, standards, and procedures.
• Working knowledge of frameworks such as ISF, NIST, ISO, and ITIL.
• Excellent communication skills with the ability to convey risk in accessible, business-friendly terms.
• Strong prioritisation and problem-solving skills under pressure.

Desirable Certifications

CISSP – Certified Information Systems Security Professional

CISA – Certified Information Systems Auditor

CRISC – Certified in Risk and Information Systems Control

Why Join?

You’ll play a pivotal role in shaping the security culture and risk posture of the organisation while working in a collaborative, forward-thinking environment. If you’re ready to bring your GRC expertise to a role that truly makes a difference—we want to hear from you.

Apply now and help build a secure, resilient future.