Senior GRC Cyber Security Analyst – London (Hybrid)

About the role

We are seeking a Senior GRC Cyber Security Analyst to join our growing international organisation in London. Working closely with the Director of Information Security, you will lead governance, risk management and compliance activities across the business, supporting a hybrid working model.

Key responsibilities

• Maintain and update information security policies, standards and procedures.
• Support compliance with ISO 27001, GDPR, NIS2 and related frameworks.
• Coordinate audit evidence, compliance activities and governance documentation.
• Manage the Information Security Risk Register, facilitate risk assessments and track remediation plans.
• Produce security reporting, KPI/KRI dashboards and executive/board updates.
• Conduct supplier security assessments and manage customer security questionnaires.
• Support third‑party due diligence and business continuity/disaster recovery activities.
• Coordinate security awareness initiatives across the organisation.

Required profile

• Proven experience in a Cyber Security Governance, Risk & Compliance function.
• Strong knowledge of ISO 27001, GDPR and NIS2 regulations.
• Experience with risk management, security policies and standards.
• Familiarity with audit and compliance processes and supplier assurance.
• Ability to communicate security risk insights to stakeholders and senior management.

Required skills

• ISO 27001
• GDPR
• NIS2
• Risk Management
• Security Policies & Standards
• Audit & Compliance
• Supplier Assurance
• Microsoft 365

What we offer

• Salary £70,000‑£85,000 per year, dependent on experience.
• Hybrid working model – three days per week in the London office.
• Opportunity to shape and mature cyber governance within an international organisation.
• Exposure to enterprise security programmes and long‑term career progression.