Information Security Analyst
Core
GRC Analyst supporting governance, risk, and compliance operations for ISO 27001 and SOC 2 frameworks in a data-intensive B2B environment.
Role type
GRC Analyst (IC)
Builds
GRC program operations, audit readiness, risk registers, control mappings
Domain
Cybersecurity / GRC / Compliance
Deliverable
dashboards & analysis
Required skills
ISO 27001, SOC 2, risk assessment, control monitoring, audit support, vendor risk assessment, process improvement, documentation management
Preferred skills
AI security knowledge, automation, process optimization
Technologies
ISO 27001, SOC 2
Responsibilities
Support day-to-day GRC programme operations including control monitoring and audit readiness; Maintain and improve documentation: policies, procedures, risk registers, control mappings; Support internal and external audits, questionnaires, vendor risk assessments; Partner with Engineering, IT Operations, and Compliance to track remediation closure; Identify and implement process improvements for efficiency and automation; Flag AI risk intersections with existing controls and programmes
Seniority
Junior to Mid-level, hands-on IC