Information Security Analyst (GRC Focus)

About the Role

Our client is seeking a detail-oriented Information Security Analyst with a focus on Governance, Risk, and Compliance (GRC) to join their team in Norwich . This role will play a key part in ensuring the organization adheres to security policies, regulations, and industry best practices. You will be involved in risk assessments, policy development, compliance monitoring, and assisting with security awareness programs. This is an excellent opportunity for an analyst looking to specialize in GRC and contribute to a secure and compliant operational environment.

Key Responsibilities

• Assist in the development, implementation, and maintenance of information security policies and procedures.
• Conduct regular risk assessments and maintain the risk register.
• Monitor compliance with security policies and relevant regulations (e.g., GDPR).
• Support internal and external audits by providing necessary documentation and evidence.
• Develop and deliver security awareness training materials.
• Respond to GRC-related inquiries and provide guidance to business units.

Requirements

• Experience in an Information Security role, with a focus on GRC.
• Understanding of security frameworks (e.g., ISO 27001, NIST CSF) and compliance principles.
• Familiarity with risk assessment methodologies and policy development.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication abilities.
• Relevant certifications such as Security+ or foundational GRC certifications are a plus.

Benefits

• Competitive salary and benefits package.
• Opportunities for professional growth in GRC and cybersecurity.
• Flexible working arrangements, including remote options.
• A supportive and collaborative team environment.
• A role focused on shaping security governance and compliance in Norwich .