Job Description
Information Security GRC Specialist Role - Insurance, The City, London
We are seeking an experienced Senior Information Security GRC Specialist to join a growing cyber security function. Reporting to the Head of Security GRC & Deputy CISO, you will play a key role in shaping security governance, managing cyber risk, driving compliance, and embedding security best practices across the business.
Key Responsibilities
- Support the delivery of the Information Security strategy and governance framework.
- Lead and manage information security risk assessments, audits, and remediation activities.
- Maintain security policies, standards, and the Information Security Risk Register.
- Track and report on cyber risks, control effectiveness, and compliance metrics.
- Drive compliance with regulations and frameworks including NIST, GDPR, DORA, and other industry standards .
- Deliver security awareness initiatives and provide expert guidance to business and technology teams.
- Support incident management and continuous improvement of security processes.
- Deputise for the Head of Security GRC & Deputy CISO when required.
About You
- 10+ years' experience in Information Security, with significant exposure to GRC and cyber risk management .
- Proven leadership experience and the ability to influence stakeholders at all levels.
- Strong knowledge of security frameworks, governance, risk management, and regulatory compliance.
- Excellent communication, reporting, and stakeholder management skills.
- Experience operating within regulated environments such as insurance or financial services is highly desirable.
This is an excellent opportunity to join a forward-thinking organisation and play a pivotal role in strengthening and maturing its cyber security governance and risk capabilities.
Information Security GRC Specialist Role - Insurance, The City, London employer: Michael James Associates
Join a top-tier global insurance firm in London, where you will have the unique opportunity to lead the design and implementation of a comprehensive risk and compliance framework across 60 countries. Our dynamic work culture fosters collaboration and innovation, providing you with significant ownership and the chance to make a real impact while enjoying hybrid working arrangements. With a strong focus on employee growth and development, we empower our team members to thrive in their careers while navigating complex international environments.
