Information Security GRC Specialist

Salary: £80,000 - 83,000 per year

Requirements:

• Bachelors degree in Information Technology, Cybersecurity, or a related field; equivalent work experience also considered.
• 3 to 5 years of professional experience in information security.
• Certification such as Certified Information Systems Security Professional (CISSP) strongly preferred.
• Deep understanding of cybersecurity principles, frameworks such as NIST and ISO/IEC 27001, and compliance standards.
• Experience with financial services regulations such as FCA, SEC, MAS, and DORA.
• Proficient knowledge of network security principles and controls such as firewalls, IPS/IPD, TCP/IP, DHCP, and DNS.
• Extensive experience securing operating systems such as Windows, UNIX/Linux, and Mac systems, including security access rights and configuration best practices.
• Knowledge of cloud service models and deployment models, with experience implementing and managing cloud security best practices.
• In-depth knowledge of IAM principles and technologies, including Single Sign-On, Multi-Factor Authentication, and role-based access control systems.
• Understanding of Secure DevOps and CI/CD pipeline governance.

Responsibilities:

• Develop and maintain comprehensive cybersecurity policies and procedures.
• Ensure cybersecurity policies align with industry standards and regulatory requirements.
• Integrate security practices and controls across technical and non-technical departments to enhance workflow and operational processes.
• Conduct regular risk assessments to identify vulnerabilities and threats.
• Collaborate on and oversee the implementation of risk mitigation strategies.
• Monitor emerging threats and evolving technologies to refine risk assessment protocols.
• Design and evaluate control metrics to assess the effectiveness of cybersecurity measures.
• Collaborate with Enterprise Risk Management to embed cyber risk into broader risk registers and board-level reporting.
• Monitor and ensure compliance with internal policies, industry standards, and regulatory requirements.
• Engage with stakeholders in Technology, Legal, Compliance, and Internal Audit as required.
• Compile and deliver detailed compliance reports to senior management.
• Monitor upcoming regulations and prepare compliance roadmaps.
• Support and enhance cybersecurity awareness training programs.
• Foster a company-wide culture of cybersecurity awareness.
• Keep current with the latest cybersecurity trends and best practices to inform training content and security measures.
• Train and guide wider tech team members on best practices in cybersecurity risk management.
• Actively participate in the response to security incidents.
• Support post-incident evaluations and reporting.
• Collaborate with relevant stakeholders to devise and enforce corrective measures to strengthen defences against future incidents.
• Maintain clear and effective communication with stakeholders at all levels.
• Provide expert guidance on cybersecurity best practices.
• Work collaboratively with Technology and other departments to achieve comprehensive security objectives.

Technologies:

• CI/CD
• Cloud
• DevOps
• IAM
• Support
• Linux
• Network
• Security
• TCP/IP
• Unix
• Windows
• IaaS
• Incident Management
• PaaS
• RBAC

More:

We are Janus Henderson, and our mission is to help clients define and achieve superior financial outcomes through differentiated insights, disciplined investments, and world-class service. We are committed to protecting and growing our core business, amplifying our strengths, and diversifying where we have the right. Our values guide everything we do: Clients Come First, Execution Supersedes Intention, Together We Win, Diversity Improves Results, and Truth Builds Trust. We offer a hybrid working environment, support flexibility where possible, and are committed to an inclusive and supportive workplace where diversity is valued. We welcome applicants from all backgrounds and encourage candidates to apply even if they do not meet every requirement. Janus Henderson is an equal opportunity and affirmative action employer, and all applications are subject to background checks.

last updated 36 week of 2026