Information Security GRC Analyst

Information Security GRC AnalystLocation: LondonSalary: £38,000-£48,000Working Pattern: Hybrid

About the RoleA London-based law firm is looking for a Information Security GRC Analyst to join its Risk and Information Security team. This is a strong opportunity for someone at the early stages of their GRC career to build practical experience within a professional services environment, with exposure to ISO 27001, information security risk, compliance and assurance.

Key Responsibilities

\n
• Support the administration and continual improvement of the Information Security Management System (ISMS).
\n
• Assist with ISO 27001 certification, surveillance and internal audit activities.
\n
• Coordinate audit evidence collection and track remediation actions.
\n
• Maintain information security policies, procedures, standards and governance documentation.
\n
• Support information security risk assessments, treatment plans and exception tracking.
\n
• Coordinate client security due diligence questionnaires and assurance requests.
\n
• Support supplier assurance and third-party risk assessments.
\n
• Produce information security metrics, dashboards and management reporting.
\n
• Support security awareness, communications and training activities.
\n

Key Requirements

\n
• Understanding of information security governance, risk and compliance principles.
\n
• Knowledge of ISO 27001 or other recognised information security frameworks.
\n
• Some experience within Information Security, GRC, Risk, Compliance or a related area.
\n
• Exposure to audits, compliance reviews or governance processes would be beneficial.
\n
• Understanding of supplier assurance or third-party risk management would be advantageous.
\n
• Experience producing reports, dashboards or management information.
\n
• Proficiency in Microsoft Office, particularly Excel, Word and PowerPoint.
\n
• Relevant information security or GRC qualifications, such as ISO 27001 Foundation or CISM, would be advantageous.
\n

Inventum Group is acting as an Employment Agency in relation to this vacancy.