At a Glance
- Tasks: Support and enhance security governance, risk management, and compliance activities.
- Company: Dynamic organisation focused on robust security standards and regulatory compliance.
- Benefits: Competitive salary, fully remote work, and opportunities for career development.
- Why this job: Make a real impact on security maturity in a diverse environment.
- Qualifications: Experience in Cyber Security GRC and understanding of security frameworks.
- Other info: Join a growing team with genuine influence on governance and risk activities.
The predicted salary is between 42000 - 84000 £ per year.
Ready to make your application? Please do read through the description at least once before clicking on Apply.
Type: Permanent
Location: Remote, UK-based
Salary: £50-60K
We are seeking a GRC Analyst to strengthen our client's governance, risk and compliance capability. The organisation is committed to maintaining robust security standards and regulatory compliance across its operations.
This is a fully remote role offering real visibility and the opportunity to influence security maturity across a diverse environment.
The Role
As a Cyber Security GRC Analyst, you will support and enhance the organisation's security governance framework, risk management processes, and compliance activities. Working closely with IT, security and business stakeholders, you'll help identify and mitigate risk, maintain compliance with key regulatory requirements (including PCI DSS and GDPR), and contribute to building a strong culture of security awareness.
Key Responsibilities
- Information Security Frameworks - Support ongoing alignment with ISO 27001, ISO 22301 and NIST standards.
- Risk Management - Conduct security risk assessments and contribute to the continuous improvement of the risk management framework.
- Third-Party Risk Management (TPRM) - Assist in overseeing supplier and supply chain security assurance processes.
- Security Awareness - Support initiatives that promote a positive and proactive security culture.
- Policy & Governance - Contribute to the development and maintenance of security policies, standards and procedures.
- Control Assurance - Assess security controls and provide recommendations for improvement.
- Compliance Activities - Support PCI DSS compliance requirements and collaborate with relevant stakeholders on GDPR adherence.
- Business Continuity & Disaster Recovery - Assist with BC/DR planning, testing and documentation.
About You
- Proven experience in a Cyber Security GRC or Information Security Analyst role
- Strong understanding of recognised security frameworks (ISO 27001, NIST, etc.)
- Experience supporting PCI DSS and GDPR compliance
- Exposure to third-party risk management processes
- Strong analytical skills with the ability to engage effectively with technical and non-technical stakeholders
- Relevant certifications such as CISM, CISSP or CISA (desirable but not essential)
Why Apply?
- Fully remote working
- Opportunity to develop within a growing and evolving security function
- Exposure to a complex, multi-site and digitally enabled environment
- A role offering genuine influence across governance, risk and compliance activities
If you're looking to build your GRC career within a business that takes security seriously and offers real scope for progression, we'd be keen to speak with you. Apply now or get in touch for a confidential discussion.
GRC Analyst - Cyber Security in London employer: Tec Partners
Contact Detail:
Tec Partners Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land GRC Analyst - Cyber Security in London
✨Tip Number 1
Network like a pro! Reach out to folks in the cyber security field, especially those who work in GRC roles. Use platforms like LinkedIn to connect and engage with them; you never know who might have a lead on your dream job!
✨Tip Number 2
Prepare for interviews by brushing up on key frameworks like ISO 27001 and NIST. Be ready to discuss how you've applied these in past roles. We want to see your passion for security and how you can contribute to our client's governance and compliance efforts.
✨Tip Number 3
Showcase your analytical skills! During interviews, share specific examples of how you've identified and mitigated risks in previous positions. This will demonstrate your ability to engage with both technical and non-technical stakeholders effectively.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets the attention it deserves. Plus, we love seeing candidates who are proactive about their job search!
We think you need these skills to ace GRC Analyst - Cyber Security in London
Some tips for your application 🫡
Read the Job Description Thoroughly: Before you dive into your application, take a moment to really understand what we're looking for. Familiarise yourself with the key responsibilities and requirements so you can tailor your application to show us you're the perfect fit.
Showcase Your Relevant Experience: When writing your application, highlight your experience in Cyber Security GRC or as an Information Security Analyst. Use specific examples that demonstrate your understanding of security frameworks like ISO 27001 and your involvement in compliance activities.
Be Authentic and Personal: We want to get to know the real you! Don’t be afraid to let your personality shine through in your application. Share why you're passionate about Cyber Security and how you can contribute to our mission of maintaining robust security standards.
Apply Through Our Website: Once you're happy with your application, make sure to apply through our website. It’s the best way for us to receive your details and ensures you’re considered for this exciting opportunity. We can’t wait to hear from you!
How to prepare for a job interview at Tec Partners
✨Know Your Frameworks
Make sure you brush up on ISO 27001, NIST, and other relevant security frameworks. Be ready to discuss how you've applied these in your previous roles, as this will show your understanding of the standards the company values.
✨Showcase Your Risk Management Skills
Prepare examples of past risk assessments you've conducted. Highlight how you identified risks and what steps you took to mitigate them. This will demonstrate your hands-on experience and analytical skills.
✨Understand Compliance Requirements
Familiarise yourself with PCI DSS and GDPR compliance requirements. Be prepared to discuss how you've supported compliance initiatives in the past, as this is crucial for the role.
✨Engage with Stakeholders
Think about how you've effectively communicated with both technical and non-technical stakeholders. Prepare to share specific instances where your communication skills made a difference in a project or initiative.