> Markdown version of [/jobs/ext/753913-information-security-grc-analyst](https://www.wearedevelopers.com/jobs/ext/753913-information-security-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security GRC Analyst - **Company:** UBDS Group - **Location:** London, UK - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cyber Security, Data Governance, Information Technology Audit, Cloud Services, Information Security Management System, Cloud Platform System, RSA Archer Platform - **Published:** June 6, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=2de7f6d5b48598d8 ## About the Role Do you have experience in Report writing?, * 3-5 years' experience in Information Security, Cyber Security, Governance, Risk & Compliance, IT Audit, or Risk Management roles. * Experience conducting information security risk assessments and control reviews. * Strong understanding of information security governance and risk management principles. * Working knowledge of ISO 27001 and information security management systems. * Familiarity with security frameworks and standards including NIST Cybersecurity Framework and Cyber Essentials. * Experience supporting audit, compliance, or assurance activities. * Strong stakeholder engagement and communication skills. * Excellent report writing, documentation, and presentation capabilities. * Ability to communicate complex security concepts to both technical and non-technical audiences. * Able to work in London 2-3 days per week. Desirable * Experience working within government, public sector, regulated, or enterprise environments. * Knowledge of GovAssure assessments and public sector security requirements. * Familiarity with cloud environments including Microsoft Azure and AWS. * Experience using GRC platforms and risk management tooling. * Understanding of Secure by Design and security architecture principles. Certifications One or more of the following would be advantageous: * ISO 27001 Lead Implementer or Lead Auditor * Security+ * CGRC * CISA * CRISC * CISSP (or Associate CISSP) ## Description We are seeking an experienced Information Security Analyst to support the delivery of governance, risk, and compliance (GRC) services for one of our leading clients. Working closely with senior stakeholders, technology teams, and security leadership, you will play a key role in strengthening the organisation's cyber security posture through effective risk management, compliance assurance, and security governance activities. You will support the implementation and maintenance of recognised security frameworks and standards while helping to drive security improvements across business and technology functions. This is an excellent opportunity for a security professional, who is comfortable operating in a client-facing environment and can provide pragmatic, risk-based security advice. Key Responsibilities * Support the delivery of cybersecurity governance, risk, and compliance activities, ensuring alignment with frameworks including ISO 27001, NIST Cybersecurity Framework, Cyber Essentials, and GovAssure. * Conduct information security risk assessments across business processes, programmes, projects, technology platforms, and third-party suppliers. * Maintain security risk registers, track remediation actions, and support the effective management of cyber risk across business and technology functions. * Produce high-quality security documentation, including policies, standards, compliance evidence, assessment reports, and executive-level reporting. * Support internal and external audits, control reviews, assurance activities, and compliance assessments. * Facilitate workshops and engage with stakeholders across technical, programme, operational, and leadership teams to gather requirements, collect evidence, and drive security initiatives. * Support supplier assurance and third-party risk management activities. * Assist with the development and continuous improvement of security governance processes and controls. * Support in embedding security best practices, data governance, and Secure by Design principles across recovery, transformation, and operational workstreams. * Contribute to security awareness, risk reporting, and governance activities across the client environment., At UBDS Group our mission is to support entrepreneurs who are setting new standards with technology solutions across cloud services, cybersecurity, data and AI, ensuring that every investment advances our commitment to innovation, making a difference, and creating impactful solutions for organisations and society. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [ZEISS & Microsoft - Building the Next Generation Medical Ecosystem in the Cloud](https://www.wearedevelopers.com/videos/424-zeiss-microsoft-building-the-next-generation-medical-ecosystem-in-the-cloud) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)