Information Security Specialist (GRC)

La Fosse Associates; Greater London; Hybrid; GBP 81,000 - 99,000; Full time

Benefits offered by this job

Pension

Job summary

La Fosse Associates is seeking a Senior Information Security (GRC) Specialist to shape governance strategy, uplift capabilities, and drive meaningful change across the business. The role offers visibility, progression, and the opportunity to influence GRC at scale.

The successful candidate will lead across governance, risk and compliance, apply NIST and IT control frameworks, and collaborate with senior stakeholders to remediate gaps. Hybrid London-based role with salary up to £90,000.

Qualifications

• Broad senior GRC specialist capable across governance, risk and compliance.
• Strong in cyber risk management, including identifying, tracking, prioritising and remediating risks.
• Experienced applying NIST and IT control frameworks, with gap assessment and uplift of controls.
• Confident developing and implementing security policies, standards and governance frameworks.
• Comfortable supporting audit activity and driving remediation.
• Able to guide the wider team on good GRC practice.
• Willing to contribute to information security strategy.
• Motivated by transformation, uplift and continuous improvement.
• Strong communicator with tech, business, and leadership.

Responsibilities

• Define and lead GRC strategy across the organisation.
• Uplift governance, risk and compliance capabilities at scale.
• Collaborate with auditors and business stakeholders to drive remediation.
• Provide guidance on best-practice GRC to the wider team.

Skills

GRC specialist

Cyber risk management

NIST controls

Policy development

Audit support

Team guidance

Information security strategy

Transformation mindset

Strong communicator

Job description

I’m working with a global organisation undergoing a major transformation in how they deliver Governance, Risk & Compliance. They’re looking for a Senior Information Security (GRC) Specialist to help their security governance strategy, uplift capability, and drive meaningful change across the business.

This role offers genuine progression, visibility, and the opportunity to influence how GRC operates at scale.

The right person will be:

• A broad senior GRC specialistwho can turn their hand to most areas of governance, risk and compliance.
• Strong in cyber risk management, including identifying, tracking, prioritising and remediating risks.
• Experienced applying NIST and IT control frameworks, with the ability to assess gaps and uplift controls.
• Confident developing and implementing security policies, standards and governance frameworks.
• Comfortable working with supporting audit activity and driving remediation.
• Able to guide the wider team on what good GRC practice looks like.
• Someone who wants to contribute to information security strategy.
• Motivated by transformation, uplift and continuous improvement.
• A strong communicator who can work with technical teams, business stakeholders and senior leadership.

Details:

Salary: up to £90,000

Location: 2x a week in London

Pension and benefits

If this sound of interest please APPLY NOW! or email your CV over to [e-mail] with a good time to call