GRC Analyst

Location: London - 2 Gresham Street

The Role

• We are seeking an individual eager to expand their expertise in Governance, Risk, and Compliance (GRC). This
• role supports the GRC team in safeguarding company data and operations by helping to implement, monitor, and
• enhance security controls. You will collaborate closely with stakeholders and cross-functional teams to ensure
• compliance with key security frameworks such as ISO27001, as well as regulations like DORA and GDPR.
• While this position is not technical, it offers an excellent opportunity for someone looking to grow their GRC skills
• and expand their knowledge in Cybersecurity.

Key Responsibilities

• Champion Information Security awareness across the organization through initiatives such as

cybersecurity awareness campaigns, annual training sessions, and regular InfoSec news bulletins.

• Assist in the maintenance and update of security policies within the Information Security Management

System (ISMS) alongside the InfoSec management team.

• Coordinate and manage logistics for both internal and external audits.
• Support compliance assessments and audits, ensuring effective engagement with relevant stakeholders.
• Identify opportunities for continuous improvement in security practices and processes.
• Review and track risk actions, working with owners to ensure timely updates.
• Monitor Information Security Incidents, liaising with incident handlers to ensure accurate and timely

reporting.

• Produce reports, metrics, and dashboards to evaluate and report on the effectiveness of security controls.