Information Security GRC Analyst
6 Months
GBP45k FTC or GBP450/Day Inside IR35
London
We are seeking an experienced Information Security GRC Analyst to support the delivery of Governance, Risk and Compliance (GRC) services for a leading organisation.
The Information Security GRC Analyst role will be an initial 6 month contract, and can be offered as either a FTC with a salary of between GBP30 - GBP45k, or day rate contract between GBP350 - GBP450/Day Inside IR35 on an umbrella solution. The role is based in London and will be office based 2 days per week and the remainder remote.
You will work with senior stakeholders, technology teams and security leadership to strengthen the organisation's cyber security posture through risk management, compliance assurance and security governance. This role suits a security professional who can provide practical, risk-based advice in a client-facing environment.
Key Responsibilities
- Support GRC activities aligned with ISO 27001, NIST Cybersecurity Framework, Cyber Essentials and GovAssure.
- Conduct information security risk assessments across business processes, projects, technology platforms and third-party suppliers.
- Maintain risk registers, track remediation actions and support cyber risk management.
- Produce security policies, standards, assessment reports, compliance evidence and executive reporting.
- Support audits, control reviews, assurance and compliance assessments.
- Engage stakeholders, facilitate workshops and gather evidence to support security initiatives.
- Contribute to supplier assurance and third-party risk management.
- Improve security governance processes and controls.
- Support security best practices, data governance and Secure by Design principles across operational, recovery and transformation workstreams.
Essential skills
- 3-5 years' experience in Information Security, Cyber Security, GRC, IT Audit or Risk Management.
- Experience in security risk assessments, control reviews and audit or compliance activities.
- Strong understanding of security governance, risk management and ISO 27001.
- Familiarity with NIST Cybersecurity Framework and Cyber Essentials.
- Strong stakeholder engagement, communication, report writing and presentation skills.
- Ability to communicate security concepts to technical and non-technical audiences.
Desirable
- Experience in government, public sector, regulated or enterprise environments.
- Knowledge of GovAssure and public sector security requirements.
- Familiarity with Microsoft Azure and AWS.
- Experience with GRC platforms and risk management tools.
- Understanding of Secure by Design and security architecture principles.
Certifications
One or more of the following would be advantageous:
- ISO 27001 Lead Implementer or Lead Auditor
- Security+
- CGRC
- CISA
- CRISC
- CISSP / Associate CISSP
Information Security GRC Analyst, Information Security Analyst, Information Security GRC Analyst , Security Analyst, Information Security GRC Analyst , GRC Analyst, Information Security GRC Analyst, ISO27001, Azure, AWS, NIST, Cyber essentials, analyst, Information Security, GRC, IT audits, Risk Management
#J-18808-Ljbffr
Information Security GRC Analyst in London employer: Circle Recruitment
As a Senior Film & Motion Engineer at our Bristol location, you'll be part of a dynamic and innovative team that values creativity and collaboration. We offer competitive salaries, comprehensive benefits, and ample opportunities for professional growth, all within a supportive work culture that encourages experimentation and the exploration of new technologies. Join us to make a meaningful impact on global projects while enjoying the flexibility of a hybrid working model.
