IT Security Analyst - GRC focus

2Are you looking to join a global software technology company, with their main base of operations here, in the UK, as an experienced GRC IT Security Analyst?

Do you have experience in the GRC IT Security space with audits, ISO27001, PCI DSS, SOC2, NIST & current compliance regulations? (Some, or all is fine!)

If so & you are looking to expand your IT Security career, meet new team members, embrace new challenges & join a world-class team – we’d like to hear from you!

Job title: IT Security Analyst – Governance, Risk & Compliance focus.

Salary: £50K - £60K Basic range + 10% Bonus + Excellent benefits package

Location: Central London office. We offer a hybrid workplace, with a LOT of flexibility for remote. However, due to the nature of the role; dealing with external auditors & internal departments, we have put, roughly, 1-2 days per week on this, in office. Some weeks, it may be zero though! Some weeks, it may be 3 days – flexibility is key.

If you’re an experienced GRC Security Analyst, you’ll already know what the role will entail, but see below for things we’ll need to see in order to be considered:

 - Knowledge and experience of ISO27001, PCI DSS, SOC2, NIST and CIS benchmarking 

 - Knowledge and experience achieving and maintaining compliance with relevant legislation, such as DPA, GDPR

 - Knowledge of cloud environments (AWS, Azure) & Windows, &/or Linux environments (To be clear: this is NOT a technical, hands-on role. We have a separate security engineering team for that…)

Things we’d love to see, but are not needed to be considered (& you’ll get experience in by joining us):

 - IT Security Risk & Compliance tooling: Drata, Vanta, or another.

 - If you come with CISA or Lead Auditor certifications, then that would be handy!

Reporting directly to the IT Security GRC Director, you’ll need strong communications & internal / external stakeholder management skills.

If all the above sounds of interest & you’d like to find out more, please do apply now, or get in touch for a confidential discussion.