UK Information Security GRC Analyst – Governance, Risk & Assurance

PCI Pal; Greater London; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

25 days holiday

Insurance cover

EV scheme

Work from anywhere 2 weeks/year

Wellbeing & rewards hub

Training & development

Team events

Job summary

PCI Pal is seeking an Information Security GRC Analyst (UK-based) to strengthen its central Information Security function by delivering governance, risk and compliance analysis across audit, assurance, control management and strategic change. The role turns requirements, evidence, risks and delivery updates into accurate, traceable information that supports timely decisions by the GRC Lead and CISO.

The role works in close partnership with the Information Security Project Manager to track

Qualifications

• Experience in GRC, information security compliance, risk management or assurance.
• Familiar with PCI DSS, ISO 27001, SOC 2 or NIST CSF and applying requirements.
• Ability to review policies, audit reports and evidence and translate findings.
• Strong organization to track plans, risks, dependencies and status.
• Excellent written and verbal communication for stakeholders.
• Experience in PCI DSS Level 1 environments or regulated tech/cloud settings.
• Qualification in information security, risk, audit, compliance or delivery.

Responsibilities

• Audit & Assurance: support audits, coordination, evidence reviews and reporting.
• Program Tracking: track initiatives, maintain trackers and update owners.
• Risk & Remediation: link risks to controls, monitor remediation and closure.
• AI Governance: support AI governance, validate AI outputs and improvements.

Skills

GRC experience

Information security

Audit & assurance

Policy review

Stakeholder comms

Evidence and tracking

Education

Information security qualification

Tools

Drata

Jira

ServiceNow GRC

Archer

OneTrust

Job description

PCI Pal is seeking an Information Security GRC Analyst (UK-based) to strengthen its central Information Security function by delivering governance, risk and compliance analysis across audit, assurance, control management and strategic change. The role turns requirements, evidence, risks and delivery updates into accurate, traceable information that supports timely decisions by the GRC Lead and CISO.

The role works in close partnership with the Information Security Project Manager to track