Junior Information Security Analyst (GRC)

Are you in the early stages of your Information Security career and looking for an opportunity to develop your GRC experience?

We're recruiting for a Junior Information Security Analyst to join an established Information Security and Risk team within a highly regarded professional services organisation in Central London.

This is a junior-level opportunity aimed at someone with around 1-2 years' experience within Information Security, GRC, IT risk or a related area. You'll work alongside experienced Information Security professionals and receive support and guidance while developing your knowledge across ISO 27001, risk management, supplier assurance, security policies and compliance.

This role would particularly suit someone currently working as an Information Security Assistant, Junior Security Analyst, GRC Analyst, IT Risk Analyst or similar, who is looking to take the next step in their career.

Salary & Benefits

• £38,000-£48,000 depending on experience
• Hybrid working - 3 days per week in the Central London office
• Excellent career development and training

What you'll be doing

Working as part of the wider Information Security team, you'll support a broad range of GRC activities, including:

• Assisting with the ongoing maintenance of the Information Security Management System (ISMS)
• Supporting ISO 27001 certification, surveillance and internal audit activities
• Coordinating audit evidence and helping track remediation actions
• Assisting with the maintenance of information security policies, standards and documentation
• Completing client security questionnaires and due diligence requests
• Helping prepare security metrics, dashboards and management information
• Supporting security awareness and training initiatives across the business

What we're looking for

• Around 1-2 years' experience within Information Security, GRC, IT risk, compliance or a related security function
• A genuine interest in developing a career within Information Security Governance, Risk & Compliance
• Strong written and verbal communication skills
• Good organisation and attention to detail
• An analytical mindset and willingness to learn
• Some exposure to ISO 27001, information security policies, risk assessments or audits would be advantageous
• Experience within Legal, Financial Services, Government or another regulated/professional environment would be beneficial, but isn't essential

We're particularly interested in candidates who have gained some initial Information Security experience and are now looking for a role where they can broaden their knowledge and develop within an experienced team.

Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive workplace where all employees feel valued and respected. We encourage applications from candidates of all backgrounds.

Due to the high volume of applications, if you haven't heard from us within 72 hours, please assume your application has been unsuccessful on this occasion.