Lead Information Security & GRC Analyst

NST Recruitment Limited; United Kingdom; Remote; GBP 70,000 - 90,000; Full time

Job summary

A leading recruitment agency is looking for a Lead Information Security & GRC Analyst to oversee the implementation of security frameworks like ISO 27001. This remote role is pivotal for driving security standards and requires experience in audits and data security tools. Candidates will benefit from the opportunity to lead critical security initiatives and collaborate with senior leadership.

Qualifications

• 5+ years of experience in information security roles.
• Extensive knowledge of ISO 27001 and other security frameworks.
• Proven ability to implement and maintain security standards.

Responsibilities

• Lead the implementation of information security frameworks.
• Utilize automated tools for security assessments.
• Support and manage internal and external security audits.

Skills

Information Security

GRC

ISO 27001

Security Policies

Data Security

Data Privacy

Audit

Automation

OneTrust

ServiceNow GRC

Tools

Vulnerability Scanners

Firewalls

IDS/IPS

Job description

Lead Information Security & GRC Analyst – Information Security, ISO 27001, ISMS, Implementation, Security Policies, GRC, Data Security, Data Privacy, Audit, Automation, OneTrust, ServiceNow GRC, Remote (UK)

This is a fantastic Lead Information Security & GRC Analyst opportunity to work with a global technology services business, driving critical information security and GRC standards, including ISO 27001 implementation, and ensuring security audit readiness.

The Lead Information Security & GRC Analyst is a remote working role, based in the UK, with some occasional travel required.

As a Lead Information Security & GRC Analyst, you will be taking ownership of the implementation and maintenance of information and data security standards and frameworks, including ISO 27001, SOC 2, and PCI. Credible experience utilising automated security tools such as vulnerability scanners, as well as firewalls, IDS/IPS, etc, is essential as Lead Information Security & GRC Analyst, as well as privacy tools such as OneTrust and ServiceNow GRC. Extensive experience in application and data security is required as Lead Information Security & GRC Analyst, including systems programming and design. As Lead Information Security & GRC Analyst, you must support internal and external security audits. The Lead Information Security & GRC Analyst will have excellent collaboration and stakeholder management skills, able to create and present security reports to senior leadership.

Key Skills as Lead Information Security & GRC Analyst:

• Lead implementation and maintenance of security frameworks (ISO 27001, SOC 2, PCI).
• Utilise security tooling (e.g., vulnerability scanners, firewalls, IDS/IPS) as well as data privacy tools such as OneTrust and ServiceNow GRC.
• Possess deep expertise in application and data security, including systems design.
• Support internal and external security audits.
• Collaborate effectively across teams and manage key stakeholders.
• Create and present security reports to senior leadership.

This is an exceptional Lead Information Security & GRC Analyst opportunity, with exciting prospects to lead business critical security initiatives and progress into management.

Privacy Overview

This is a remote working position, in the UK. You must be able and willing to travel occasionally, when required. Previous experience implementing and maintaining security standards and frameworks, such as ISO 27001, is essential.