Full job descriptionInformation Security GRC Analyst
Location: London
Salary: £38,000-£48,000
Working Pattern: Hybrid


About the Role
A London-based law firm is looking for a Information Security GRC Analyst to join its Risk and Information Security team. This is a strong opportunity for someone at the early stages of their GRC career to build practical experience within a professional services environment, with exposure to ISO 27001, information security risk, compliance and assurance.


Key Responsibilities
*Support the administration and continual improvement of the Information Security Management System (ISMS).
*Assist with ISO 27001 certification, surveillance and internal audit activities.
*Coordinate audit evidence collection and track remediation actions.
*Maintain information security policies, procedures, standards and governance documentation.
*Support information security risk assessments, treatment plans and exception tracking.
*Coordinate client security due diligence questionnaires and assurance requests.
*Support supplier assurance and third-party risk assessments.
*Produce information security metrics, dashboards and management reporting.
*Support security awareness, communications and training activities.


Key Requirements
*Understanding of information security governance, risk and compliance principles.
*Knowledge of ISO 27001 or other recognised information security frameworks.
*Some experience within Information Security, GRC, Risk, Compliance or a related area.
*Exposure to audits, compliance reviews or governance processes would be beneficial.
*Understanding of supplier assurance or third-party risk management would be advantageous.
*Experience producing reports, dashboards or management information.
*Proficiency in Microsoft Office, particularly Excel, Word and PowerPoint.
*Relevant information security or GRC qualifications, such as ISO 27001 Foundation or CISM, would be advantageous.
Inventum Group is acting as an Employment Agency in relation to this vacancy.