GRC Analyst – Information Security

About the role

Join Fifty5Blue’s information security team as a GRC Analyst, supporting the company’s mission to protect data confidentiality, availability, and integrity. You will work in a hybrid setting, collaborating with internal stakeholders and external partners to ensure compliance with audit and regulatory requirements.

Key responsibilities

• Provide support for security catalog tickets, ensuring accurate documentation and timely resolution.
• Monitor and assist with periodic user access revalidation to maintain compliance with security policies.
• Respond to customer and partner due‑diligence questionnaires, supporting internal and external compliance.
• Create, track, and maintain KPIs that measure the effectiveness of information‑security processes.
• Monitor, triage, and analyse Data Loss Prevention (DLP) alerts and incidents.
• Communicate DLP findings and policy updates to relevant stakeholders.
• Assist with supplier and third‑party security risk assessments, gathering evidence and reviewing compliance documentation.

Required profile

• Minimum 3 years of experience in information security or cyber security.
• Strong communication and influencing abilities with high attention to detail.
• Legal right to work permanently in the UK without visa sponsorship.

Required skills

• Data Loss Prevention (DLP) tools and incident handling.
• Security risk assessment methodologies.
• Access review and revalidation processes.