Remote InfoSec GRC Risk Analyst – UK

KDR Talent Solutions; United Kingdom; Remote; GBP 50,000 - 70,000; Full time

Benefits offered by this job

Annual bonus

Remote UK

Certification support

Career progression

Governance exposure

Job summary

KDR Talent Solutions is partnering with a UK-based financial services and asset management organisation to recruit an InfoSec Risk Analyst - GRC. The role sits in a growing Information Security function and offers broad exposure to governance, risk, and regulatory compliance.

The ideal candidate will balance technical security knowledge with business engagement, risk management and governance activities, driving a strong security culture across the business.

Qualifications

• Experience in Information Security, Cyber Security or IT Risk.
• Familiarity with governance, risk & compliance concepts.
• Knowledge of security frameworks and standards such as ISO 27001, NIST, CIS Controls or PCI-DSS.

Responsibilities

• Conduct information security risk assessments across technology, projects, suppliers and business processes.
• Evaluate the effectiveness of existing security controls and recommend improvements.
• Produce clear risk assessment reports for technical and non-technical audiences.
• Monitor risk mitigation activities and ensure actions are delivered.
• Support development and maintenance of the Information Security Risk Framework.
• Assist with third-party supplier security reviews and vendor risk assessments.
• Contribute to governance reporting and risk metrics.
• Support audits and assurance activities.
• Embed security best practices across the organisation.
• Stay informed of threats and regulatory developments.

Skills

Information security

Risk assessment

GRC

Stakeholder management

Communication skills

Cloud security

Regulatory compliance

Tools

GRC software

Risk assessment tools

Job description

KDR Talent Solutions is partnering with a UK-based financial services and asset management organisation to recruit an InfoSec Risk Analyst - GRC. The role sits in a growing Information Security function and offers broad exposure to governance, risk, and regulatory compliance.

The ideal candidate will balance technical security knowledge with business engagement, risk management and governance activities, driving a strong security culture across the business.