Junior Information Security Analyst (GRC)

Working as part of the wider Information Security team, you’ll support a broad range of GRC activities, including:

• Assisting with the ongoing maintenance of the Information Security Management System (ISMS)
• Supporting ISO 27001 certification, surveillance and internal audit activities
• Coordinating audit evidence and helping track remediation actions
• Assisting with the maintenance of information security policies, standards and documentation
• Completing client security questionnaires and due diligence requests
• Helping prepare security metrics, dashboards and management information
• Supporting security awareness and training initiatives across the business

This is a junior-level opportunity aimed at someone with around 1-2 years’ experience within Information Security, GRC, IT risk or a related area. You’ll work alongside experienced Information Security professionals and receive support and guidance while developing your knowledge across ISO 27001, risk management, supplier assurance, security policies and compliance., * Around 1-2 years’ experience within Information Security, GRC, IT risk, compliance or a related security function

• A genuine interest in developing a career within Information Security Governance, Risk & Compliance
• Strong written and verbal communication skills
• Good organisation and attention to detail
• An analytical mindset and willingness to learn
• Some exposure to ISO 27001, information security policies, risk assessments or audits would be advantageous
• Experience within Legal, Financial Services, Government or another regulated/professional environment would be beneficial, but isn’t essential

We’re particularly interested in candidates who have gained some initial Information Security experience and are now looking for a role where they can broaden their knowledge and develop within an experienced team.

• £38,000-£48,000 depending on experience
• Hybrid working - 3 days per week in the Central London office
• Excellent career development and training