Information Security Specialist (GRC)

Salary: £66,000 - 106,000 per year

Requirements:

• Broad senior GRC specialist with experience across governance, risk and compliance
• Strong cyber risk management experience, including identifying, tracking, prioritising and remediating risks
• Experience applying NIST and IT control frameworks, with the ability to assess gaps and uplift controls
• Confident developing and implementing security policies, standards and governance frameworks
• Comfortable supporting audit activity and driving remediation
• Strong communication skills with the ability to work with technical teams, business stakeholders and senior leadership
• Motivated by transformation, uplift and continuous improvement
• Interest in contributing to information security strategy

Responsibilities:

• Help shape our security governance strategy
• Uplift our GRC capability across the business
• Drive meaningful change in how we deliver Governance, Risk & Compliance
• Identify, track, prioritise and remediate cyber risks
• Assess control gaps and improve controls using NIST and IT control frameworks
• Develop and implement security policies, standards and governance frameworks
• Support audit activity and drive remediation actions
• Guide the wider team on what good GRC practice looks like
• Contribute to our information security strategy
• Work with technical teams, business stakeholders and senior leadership

Technologies:

• Support
• Security

More:

We are a global organisation undergoing a major transformation in how we deliver Governance, Risk & Compliance. This Senior Information Security (GRC) Specialist role offers genuine progression, strong visibility, and the opportunity to influence how GRC operates at scale. The role is hybrid, with two days a week in our London office, and comes with a salary of up to 90,000 plus pension and benefits.

last updated 34 week of 2026