At a Glance
- Tasks: Support information security management and improve compliance processes in a dynamic law firm.
- Company: A leading London law firm with a focus on risk and information security.
- Benefits: Competitive salary, hybrid working, and opportunities for professional growth.
- Other info: Gain exposure to ISO 27001 and work in a supportive team environment.
- Why this job: Kickstart your GRC career while making a real impact on information security.
- Qualifications: Understanding of GRC principles and some experience in information security.
The predicted salary is between 38700 - 47300 £ per year.
Information Security GRC Analyst Location: London Salary: £38,000-£48,000 Working Pattern: Hybrid
About the Role A London-based law firm is looking for a Information Security GRC Analyst to join its Risk and Information Security team.
This is a strong opportunity for someone at the early stages of their GRC career to build practical experience within a professional services environment, with exposure to ISO 27001, information security risk, compliance and assurance.
Key Responsibilities
Support the administration and continual improvement of the Information Security Management System (ISMS).
Assist with ISO 27001 certification, surveillance and internal audit activities.
Coordinate audit evidence collection and track remediation actions.
Maintain information security policies, procedures, standards and governance documentation.
Support information security risk assessments, treatment plans and exception tracking.
Coordinate client security due diligence questionnaires and assurance requests.
Support supplier assurance and third-party risk assessments.
Produce information security metrics, dashboards and management reporting.
Support security awareness, communications and training activities.
Key Requirements
Understanding of information security governance, risk and compliance principles.
Knowledge of ISO 27001 or other recognised information security frameworks.
Some experience within Information Security, GRC, Risk, Compliance or a related area.
Exposure to audits, compliance reviews or governance processes would be beneficial.
Understanding of supplier assurance or third-party risk management would be advantageous.
Experience producing reports, dashboards or management information.
Proficiency in Microsoft Office, particularly Excel, Word and Power Point.
Relevant information security or GRC qualifications, such as ISO 27001 Foundation or CISM, would be advantageous.
Inventum Group is acting as an Employment Agency in relation to this vacancy
Information Security GRC Analyst in London employer: Inventum Group (Formally Wells Tobias)
Join a global leader in maritime services that prioritises employee satisfaction and operational excellence. Our collaborative and innovative workplace offers extensive growth opportunities, allowing you to make a meaningful impact on payroll operations across multiple countries. With a commitment to professional development and a supportive team environment, this role is perfect for those looking to advance their careers in an international context.
Contact Details:
Inventum Group (Formally Wells Tobias) Recruitment Team
