Information Security GRC Analyst
6 Months
£45k FTC or £450/Day Inside IR35
London
We are seeking an experienced Information Security GRC Analyst to support the delivery of Governance, Risk and Compliance (GRC) services for a leading organisation.
The Information Security GRC Analyst role will be an initial 6 month contract, and can be offered as either a FTC with a salary of between £30 - £45k, or day rate contract between £350 - £450/Day Inside IR35 on an umbrella solution. The role is based in London and will be office based 2 days per week and the remainder remote.
You will work with senior stakeholders, technology teams and security leadership to strengthen the organisation's cyber security posture through risk management, compliance assurance and security governance. This role suits a security professional who can provide practical, risk-based advice in a client-facing environment.
Key Responsibilities
- Support GRC activities aligned with ISO 27001, NIST Cybersecurity Framework, Cyber Essentials and GovAssure.
- Conduct information security risk assessments across business processes, projects, technology platforms and third-party suppliers.
- Maintain risk registers, track remediation actions and support cyber risk management.
- Produce security policies, standards, assessment reports, compliance evidence and executive reporting.
- Support audits, control reviews, assurance and compliance assessments.
- Engage stakeholders, facilitate workshops and gather evidence to support security initiatives.
- Contribute to supplier assurance and third-party risk management.
- Improve security governance processes and controls.
- Support security best practices, data governance and Secure by Design principles across operational, recovery and transformation workstreams.
Essential skills
- 3-5 years' experience in Information Security, Cyber Security, GRC, IT Audit or Risk Management.
- Experience in security risk assessments, control reviews and audit or compliance activities.
- Strong understanding of security governance, risk management and ISO 27001.
- Familiarity with NIST Cybersecurity Framework and Cyber Essentials.
- Strong stakeholder engagement, communication, report writing and presentation skills.
- Ability to communicate security concepts to technical and non-technical audiences.
Desirable
- Experience in government, public sector, regulated or enterprise environments.
- Knowledge of GovAssure and public sector security requirements.
- Familiarity with Microsoft Azure and AWS.
- Experience with GRC platforms and risk management tools.
- Understanding of Secure by Design and security architecture principles.
Certifications
One or more of the following would be advantageous:
- ISO 27001 Lead Implementer or Lead Auditor
- Security+
- CGRC
- CISA
- CRISC
- CISSP / Associate CISSP
If you are interested in the above, hit the Apply now button!
Information Security GRC Analyst, Information Security Analyst, Information Security GRC Analyst , Security Analyst, Information Security GRC Analyst , GRC Analyst, Information Security GRC Analyst, ISO27001, Azure, AWS, NIST, Cyber essentials, analyst, Information Security, GRC, IT audits, Risk Management
Circle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter - @Circle_Rec and LinkedIn - Circle Recruitment.
