Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Support governance, risk, and compliance in information security while collaborating with diverse teams.
- Company: Avalere Health is dedicated to ensuring every patient receives equal care and support.
- Benefits: Enjoy flexible working, generous leave, health support, and a strong pension contribution.
- Other info: Join a culture that values diversity, equity, and inclusion with excellent growth opportunities.
- Why this job: Kickstart your career in info security and make a real impact on patient lives.
- Qualifications: Detail-oriented with a foundational understanding of information security concepts.
The predicted salary is between 30000 - 40000 ÂŁ per year.
About Avalere Health
United by one profound purpose: to reach EVERY PATIENT POSSIBLE. At Avalere Health, we ensure every patient is identified, treated, supported, and cared for. Equally. Our Advisory, Medical, and Marketing teams come together – powerfully and intentionally – to forge unconventional connections, building a future where healthcare is not a barrier and no patient is left behind.
Achieving our mission starts with providing enriching, purpose-driven careers for our team that empower them to make a tangible impact on patient lives. We are committed to creating a culture where our employees are empowered to bring their whole selves to work and tap into the power of diverse backgrounds and skillsets to play a part in making a difference for every patient, everywhere.
Our flexible approach to working allows our global teams to decide where they want to work, whether in-office or at home based on team and client need. Major city hubs in London, Manchester, Washington, D.C., and New York, and smaller offices globally, serve as collaboration hubs allowing our teams to come together when it matters. Homeworkers are equally supported, with dedicated social opportunities and resources.
Our inclusive culture is at the heart of everything we do. We proudly support our employees in bringing their whole selves to work with our six Employee Network Groups – Diverse Ability, Family, Gender, LGBTQ+, Mental Health, and Race/Ethnicity. These groups provide opportunities to promote diversity, equity and inclusion and to connect, learn, and socialise through regular meetings and programs of activity.
We take pride in supporting professional growth for our employees through day‑to‑day career experiences, access to thousands of on‑demand training sessions, regular career conversations, and the opportunity for global, cross‑capability career moves.
We take pride in being part of the Disability Confident Scheme. This helps make sure you can be interviewed fairly if you have a disability, long term health condition, or are neurodiverse. If you’d like to apply and need adjustments made, you can let us know in your application.
About The Role
The Information Security GRC Analyst supports the InfoSec GRC Lead in operating and improving the organization’s governance, risk, and compliance program. The role focuses on reviewing client MSAs and related security requirements, supporting internal and client audits, driving risk and exception management workflows, and supporting supplier/third‑party security reviews. The organization is aligned to ISO/IEC 27001 and is implementing ISO/IEC 42001. The role supports compliance activities relevant to HIPAA, GDPR, and APPI. This is an excellent opportunity for recent graduates or young professionals to build their career in information security.
What You’ll Do
- Governance & Management System Support: Maintain documentation and evidence for ISO/IEC 27001 & ISO/IEC 42001; support continual improvement activities.
- Client MSA & Security Requirements Review: Extract and document security requirements from client MSAs; identify gaps and risks; coordinate with Legal and Privacy teams.
- Audit Support: Coordinate internal and client audit requests; collect evidence; ensure traceability between requirements, controls, and evidence.
- Risk Management & Exceptions: Assist with risk assessments for vendors/projects; maintain risk registers; support exception workflows.
- Supplier Reviews: Assess third‑party security submissions; track supplier risk ratings and remediation actions.
- Compliance Support: Help map regulatory requirements (HIPAA, GDPR, APPI) to internal controls; maintain compliance documentation.
- Reporting & Improvement: Produce operational reports on audit status/risk metrics; contribute to process improvements.
About You
- Exceptional attention to detail
- Strong written communication skills
- Professional discretion handling sensitive information
- Foundational understanding of information security concepts (access control, encryption, incident response)
- Exposure or interest in ISO/IEC 27001 or AI governance frameworks (ISO/IEC 42001)
- Experience supporting audits, vendor risk reviews or privacy compliance is advantageous
- Familiarity with GRC/ticketing/documentation platforms (e.g., ServiceNow/Jira)
- Suitable for junior candidates (1–3 years) in security, IT, risk, compliance, audit, or related fields, or equivalent demonstrated capability.
- Bachelor’s degree in information security, IT, Risk Management, Compliance, or similar is beneficial but not required with relevant experience.
- Minimum requirement: Candidate must hold or be able to achieve the ISC2 Certified in Cybersecurity (CC) certification within an agreed onboarding period (company‑supported).
What we can offer
You’ll receive up to a 7% pension contribution, life insurance, income protection, and private medical insurance for peace of mind. Enjoy flexible working arrangements, including flexible hybrid working, along with the option to work from anywhere across the globe two weeks each year. We provide 25 days of annual leave plus two personal well‑being days, along with gifted end‑of‑year holidays and an early Summer Friday finish in June, July, and August.
Access free counselling through our employee assistance program, as well as personalized health support. Enhanced maternity, paternity, family leave, and fertility policies provide support across every stage of your family‑planning journey, as well as on‑demand support from our partner Peppy. You can also benefit from continuous opportunities to professionally develop with on‑demand training, support, and global mobility opportunities across the business.
We encourage all applicants to read our candidate privacy notice before applying to Avalere Health.
Information Security - GRC Analyst in London employer: Avalere Health Inc.
Contact Detail:
Avalere Health Inc. Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Information Security - GRC Analyst in London
✨Tip Number 1
Network like a pro! Reach out to folks in the industry, attend events, and connect on LinkedIn. You never know who might have the inside scoop on job openings or can put in a good word for you.
✨Tip Number 2
Prepare for interviews by researching the company and its culture. Understand their mission and values, especially how they aim to support every patient possible. Tailor your responses to show how you can contribute to that goal.
✨Tip Number 3
Practice common interview questions and scenarios related to information security. Use the STAR method (Situation, Task, Action, Result) to structure your answers and highlight your skills effectively.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen. Plus, it shows you’re genuinely interested in being part of our team at Avalere Health.
We think you need these skills to ace Information Security - GRC Analyst in London
Some tips for your application 🫡
Tailor Your Application: Make sure to customise your CV and cover letter for the Information Security GRC Analyst role. Highlight your relevant skills and experiences that align with the job description, especially around governance, risk, and compliance.
Showcase Your Attention to Detail: Since this role requires exceptional attention to detail, be sure to proofread your application materials. A well-organised and error-free application will demonstrate your commitment to quality and professionalism.
Express Your Passion for Information Security: Let us know why you’re excited about a career in information security! Share any relevant projects or experiences that sparked your interest in the field, particularly around ISO standards and compliance.
Apply Through Our Website: We encourage you to apply directly through our website for the best chance of being noticed. It’s the easiest way for us to keep track of your application and ensure it gets to the right people!
How to prepare for a job interview at Avalere Health Inc.
✨Know Your Stuff
Make sure you brush up on information security concepts, especially those related to governance, risk, and compliance. Familiarise yourself with ISO/IEC 27001 and 42001, as well as regulations like HIPAA and GDPR. This will not only help you answer technical questions but also show your genuine interest in the role.
✨Showcase Your Attention to Detail
As an Information Security GRC Analyst, attention to detail is crucial. Prepare examples from your past experiences where your meticulous nature made a difference. Whether it was during audits or while reviewing documents, having specific instances ready will demonstrate your capability.
✨Communicate Clearly
Strong written communication skills are essential for this role. Practice articulating complex ideas simply and clearly. You might be asked to explain how you would document security requirements or coordinate audit requests, so being able to convey your thoughts effectively will set you apart.
✨Be Ready for Scenario Questions
Expect scenario-based questions that assess your problem-solving skills in risk management and compliance. Think about how you would handle vendor risk assessments or manage exception workflows. Preparing for these types of questions will help you demonstrate your analytical thinking and decision-making abilities.