Security Risk & GRC Analyst - 12-Month FTC

Callsign; Greater London; On-site; GBP 30,000 - 46,000; Full time

Benefits offered by this job

Pension scheme with Scottish Widows

Private medical cover with Vitality

Life assurance (4x base salary)

Personal Learning & Development Budget

Cycle to Work Scheme

Company Family Leave

25 days annual leave plus CallsignBank

Employee Volunteering Program

Job summary

Callsign is seeking an early-career professional to move into Security Risk, based in the City of London. The role offers a 12-month fixed-term contract with potential exposure to Infosec GRC, data privacy, business resilience and physical security. Ideal starting in November 2026, with a UK right to work requirement.

You will support audits, govern risk management frameworks, and collaborate with multiple departments to uphold regulatory compliance and a security-first culture.

Qualifications

• Basic understanding and awareness of frameworks such as ISO 27001 and SOC 2.
• A flexible approach to work with a strong work ethic willing to support those around you.

Responsibilities

• Support internal and external audits, including tracking audit findings and remediation action through to completion.
• Implementing risk management and information security management system frameworks.
• Mastering/Understanding the principles of security, resilience and privacy by design.
• Manage the assessment and approval of remote working requests.
• Assist with the facilitation of key governance meetings such as the Security Committee and Data Governance Group.
• Support Environmental Social Governance (ESG) initiatives.
• Coordinate the key activities of the Third Party Risk Management program e.g. risk assessment of new and existing third parties
• 3LoD activities
• Help facilitate crisis management exercises
• Manage the logging and completion of compliance requests received from prospective and existing clients
• Develop a solid understanding of data protection, the AI landscape, and best practice as they impact Callsign assisting with privacy related impact assessments
• Support Business Continuity and Disaster Recovery transformation
• Working within a 'cloud-first' and agile business environment.

Skills

ISO 27001

SOC 2

Flexible work ethic

Strong interpersonal skills

Education

ABSC or equivalent in Computer Science, IT, Systems Engineering, Risk Management or related field

Job description

Callsign is seeking an early-career professional to move into Security Risk, based in the City of London. The role offers a 12-month fixed-term contract with potential exposure to Infosec GRC, data privacy, business resilience and physical security. Ideal starting in November 2026, with a UK right to work requirement.

You will support audits, govern risk management frameworks, and collaborate with multiple departments to uphold regulatory compliance and a security-first culture.