Risk & Compliance Specialist in London

Location

London, UKWeekly office requirement: Hybrid – 2 days per week Employment type: Right now we're looking for an Information Security GRC Specialist to play a key role in our Legal team in London.

If that's you, and making a difference gets you out of bed in the morning, keep reading. ðAs our Information Security GRC Specialist you'll play a pivotal role in shaping the future of security compliance at GWI.

Reporting into our General Counsel and working closely with our Information Security, Product, and Technology teams, you'll own our compliance posture across security frameworks, vendor risk, and client-facing security requirements — while building a security-conscious culture across the business.

A few things you'll be responsible for:ð Own and maintain GWI's ISO 27001 certification and compliance across relevant security frameworks, keeping our posture sharp as the threat landscape evolves.ð Develop, implement, and maintain information security policies and procedures aligned with industry best practices.ð Lead vendor risk management and client security assessments — including responding to client security questionnaires and onboarding requirements.ð Drive security awareness across the business through training programmes and internal communications that promote a strong GRC culture.

You'll need to be flexible, comfortable with continuous change, and working in a high-tempo environment.

Here's what the team will be looking for in you:ð In-depth, practical experience obtaining and maintaining ISO 27001 certification, with solid knowledge of frameworks such as NIST — typically 3–5 years in an information security compliance role, though other experience levels will be considered.ð Proven ability to develop and maintain security policies and procedures that align with industry best practice.ð Experience conducting vendor security assessments and managing client security onboarding requirements, balancing risk against commercial objectives.ð Hands-on experience building or maintaining a security trust portal; ð Strong communication skills — able to translate complex GRC topics into clear internal guidance and keep the wider business informed and engaged on security matters.

Time to recharge – 25 days' annual leave, plus office closures over the holidays.

Health & wellbeing – Health cash plan, enhanced family benefits, carer days, and mental health support.

Financial benefits – Competitive salary, 4% pension matching, and recognition programs that celebrate success.

Flexibility & balance – Flexitime, early Friday finishes, hybrid and remote options, plus a "work from home" budget.

Career growth – Accredited learning, leadership development, and global career mobility.

Community & impact – DE&I initiatives, volunteering opportunities, donation matching, and payroll giving.

Diversity, Equity & Inclusion ð«¶Diversity is fundamental to who we are—both as a data company and as a workplace.

Our data reflects global realities, and so must our teams.

As a Disability Confident employer, we welcome applications from disabled candidates and are committed to providing all necessary adjustments during the hiring process.

We also actively encourage applications from underrepresented and marginalized communities.

li-hybrid#LI-NIKOSSS1