Junior Information Security GRC Analyst

Farrer & Co; Greater London; Hybrid; GBP 28,000 - 42,000; Full time

Job summary

Farrer & Co's Junior Information Security Analyst will support the Information Security and Risk & Compliance function in maintaining and enhancing the firm’s ISMS and governance framework. The role assists with governance, risk management, supplier assurance, client due diligence, audit preparation, policy management and security awareness across the firm.

This position offers a path to develop in Information Security Governance, Risk and Compliance (GRC) with exposure to ISO 27001 and related

Qualifications

• Understanding of information security, risk management and governance principles.
• Strong organisational and administrative skills.
• Excellent written and verbal communication skills.
• Strong attention to detail and ability to work accurately.
• Ability to manage multiple priorities and meet deadlines.
• Strong analytical and problem-solving skills.
• Proficient in Microsoft Office applications (Word, Excel, PowerPoint, Outlook).
• Ability to build effective working relationships with stakeholders across the firm.
• Self-motivated with a willingness to learn and develop within information security and risk & compliance.

Responsibilities

• Support the administration and continual improvement of the Information Security Management System (ISMS).
• Assist with ISO 27001 certification (and other relevant certifications), surveillance and internal audit activities.
• Coordinate the collection of audit evidence and support remediation tracking activities.
• Support the management and maintenance of information security policies, standards, procedures and supporting documentation.
• Support the maintenance of information security risk, treatment, action and exception tracking records.
• Coordinate and manage client information security due diligence questionnaires and requests for assurance information.
• Support third-party supplier assurance and risk assessment activities.
• Support the production of information security metrics, dashboards, management reporting and ISMS objective reporting.
• Assist with security awareness, communications and training initiatives across the firm.
• Support the maintenance of information security governance documentation, registers and tracking mechanisms.

Skills

Information security concepts

Governance principles

Organisational skills

Communication skills

Attention to detail

Prioritisation

Analytical thinking

MS Office proficiency

Stakeholder relationships

Self-motivation & learning

Job description

• The Junior Information Security Analyst will support the Information Security and Risk & Compliance function in maintaining and enhancing the firm’s Information Security Management System (ISMS) and wider governance framework.
• The role will assist with information security governance, risk management, supplier assurance, client due diligence, audit preparation, policy management, reporting and security awareness activities. The successful candidate will work closely with stakeholders across the firm to support compliance with information security, regulatory and client requirements.
• This role provides an excellent opportunity for an individual looking to develop a career in Information Security Governance, Risk and Compliance (GRC) while gaining exposure to ISO 27001 and other relevant certifications, supplier assurance, risk management, audit activities and information security best practices.

Responsibilities

• Support the administration and continual improvement of the Information Security Management System (ISMS).
• Assist with ISO 27001 certification (and other relevant certifications), surveillance and internal audit activities.
• Coordinate the collection of audit evidence and support remediation tracking activities.
• Support the management and maintenance of information security policies, standards, procedures and supporting documentation.
• Support the maintenance of information security risk, treatment, action and exception tracking records.
• Coordinate and manage client information security due diligence questionnaires and requests for assurance information.
• Support third-party supplier assurance and risk assessment activities.
• Support the production of information security metrics, dashboards, management reporting and ISMS objective reporting.
• Assist with security awareness, communications and training initiatives across the firm.
• Support the maintenance of information security governance documentation, registers and tracking mechanisms.

Skills and Experience

• Understanding of information security, risk management and governance principles.
• Strong organisational and administrative skills.
• Excellent written and verbal communication skills.
• Strong attention to detail and ability to work accurately.
• Ability to manage multiple priorities and meet deadlines.
• Strong analytical and problem-solving skills.
• Proficient in Microsoft Office applications, including Word, Excel, PowerPoint and Outlook.
• Ability to build effective working relationships with stakeholders across the firm.
• Self-motivated with a willingness to learn and develop within Information Security and Risk & Compliance.

Experience in one or more of the following would also be advantageous:

• Knowledge of ISO 27001 or other information security frameworks.
• Experience supporting audits, compliance activities or governance processes.
• Experience working within Information Security, Risk, Compliance, Governance or a related function.
• Awareness of supplier assurance and third-party risk management processes.
• Experience creating reports, dashboards or management information.
• Relevant qualifications or certifications such as CISM, ISO 27001 Foundation or similar.

Special aspects

• Happy to talk flexibly. This role is suitable for individuals looking to work a minimum 0.6 FTE. Flexible working patterns will be considered within the firm’s agile working framework.
• The hours of work for this opportunity are 09:30am-5:30pm but it is essential to be committed, flexible and prepared to work beyond the normal office hours when necessary and in response to client demand. Farrer & Co operates an agile working framework under which members of the firm are expected to spend at least 40% of their working hours in the office. This is a minimum expectation: individuals may elect or be asked or expected to work more frequently in the office, depending on circumstance.
• Overtime at weekends will be required from time-to-time in order to support project work.
• We expect the successful applicant to bring the experience, commitment and passion to further define the job description and embed the principles of good Information Security in the culture of the firm.
• Farrer & Co is an equal opportunity employer that welcomes applications from candidates from all backgrounds. We look to employ the best candidates regardless of age, gender, race, ethnicity, social or economic background, religion, disability, sexual orientation, national origin, or any other protected characteristic.
• We are keen to ensure candidates have the best interview experience possible; if you require any adjustments during the interview or application process please let the recruitment team know

Comments

Farrer & Co conducts a pre-employment screening which includes a Criminal History Background and Credit Check for successful candidates.