Information Security Analyst (GRC)

About the role

We are seeking a Junior Information Security Analyst to join our growing Information Security and Risk team in central London. This role offers the chance to develop expertise in ISO 27001, governance, risk management, supplier assurance and compliance within a respected professional services firm.

Key responsibilities

• Support and enhance the Information Security Management System (ISMS).
• Assist with ISO 27001 certification, surveillance and internal audits.
• Coordinate audit evidence, track remediation actions and manage security policies, standards and documentation.
• Maintain risk registers, treatment plans and governance activities.
• Respond to client security questionnaires and due‑diligence requests.
• Help with supplier assurance and third‑party risk assessments.
• Produce security metrics, dashboards and management reports.
• Support security awareness initiatives across the business.

Required profile

• 1–2 years of experience in Information Security, Governance, Risk & Compliance or a related security function.
• Strong communication and stakeholder‑management abilities.
• Highly organised with excellent attention to detail.
• Analytical mindset and willingness to learn.
• Experience in legal, financial services or government environments is a plus.

Required skills

• Knowledge of ISO 27001 and ISMS processes.

What we offer

• Hybrid working – three days per week in our Central London office.
• Salary between £38,000 and £48,000 per year.
• Strong career development and training opportunities.
• Exposure to ISO 27001 certification and audit activities.
• Competitive benefits package and inclusive workplace culture.