GRC Analyst

GRC Analyst – Cybersecurity – £70-75k – Remote

Overview:
We are currently partnered with an award-winning cybersecurity firm specialising in Identity and Access Management (IAM) solutions. They are seeking a GRC Analyst with a strong background in ISO 27001 to support their clients in achieving their governance, risk, and compliance objectives. This is a fantastic opportunity for someone with consultancy experience who enjoys problem-solving, client interaction, and continuous learning in a fast-paced environment.

Role & Responsibilities:

• Assist clients with the implementation, maintenance, and improvement of their ISO 27001 Information Security Management Systems (ISMS)
• Conduct gap analysis, risk assessments, and internal audits to identify areas of non-compliance and recommend solutions
• Develop and review information security policies, procedures, and controls
• Support clients through ISO 27001 certification and surveillance audits
• Deliver clear and actionable reports and recommendations
• Provide advisory services on GRC best practices and industry standards
• Collaborate with cross-functional teams to ensure projects are delivered on time and to the highest standard
• Stay updated on industry trends, regulatory requirements, and emerging risks

• ISO 27001 expertise, including implementation, auditing, or consultancy experience
• Previous experience in a consultancy or client-facing environment 
• Strong understanding of risk management principles and GRC frameworks
• Experience with other standards such as ISO 22301, NIST, or SOC 2 
• Excellent communication, stakeholder management, and problem-solving skills
• Relevant certifications (e.g., ISO 27001 Lead Auditor/Implementer, CISA, CISM) are a bonus

• Up to £70-75,000 basic salary
• Excellent benefits
• Professional development opportunities
• Fully remote role