> Markdown version of [/jobs/ext/4172307-junior-information-security-analyst-grc](https://www.wearedevelopers.com/jobs/ext/4172307-junior-information-security-analyst-grc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Junior Information Security Analyst (GRC)

- **Company:** Neweasy
- **Location:** London, UK
- **Experience:** Starter
- **Salary:** £38,000.0 - £48,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Security Management System
- **Published:** October 3, 2026
- **Apply:** https://www.reed.co.uk/jobs/junior-information-security-analyst-grc/57417687

## About the Role

This is a junior-level opportunity aimed at someone with around 1-2 years' experience within Information Security, GRC, IT risk or a related area. You'll work alongside experienced Information Security professionals and receive support and guidance while developing your knowledge across ISO 27001, risk management, supplier assurance, security policies and compliance., * Around 1-2 years' experience within Information Security, GRC, IT risk, compliance or a related security function

 * A genuine interest in developing a career within Information Security Governance, Risk & Compliance
 * Strong written and verbal communication skills
 * Good organisation and attention to detail
 * An analytical mindset and willingness to learn
 * Some exposure to ISO 27001, information security policies, risk assessments or audits would be advantageous
 * Experience within Legal, Financial Services, Government or another regulated/professional environment would be beneficial, but isn't essential

We're particularly interested in candidates who have gained some initial Information Security experience and are now looking for a role where they can broaden their knowledge and develop within an experienced team.

## Description

Working as part of the wider Information Security team, you'll support a broad range of GRC activities, including:

 * Assisting with the ongoing maintenance of the Information Security Management System (ISMS)
 * Supporting ISO 27001 certification, surveillance and internal audit activities
 * Coordinating audit evidence and helping track remediation actions
 * Assisting with the maintenance of information security policies, standards and documentation
 * Completing client security questionnaires and due diligence requests
 * Helping prepare security metrics, dashboards and management information
 * Supporting security awareness and training initiatives across the business