Future Tech Jobs Future Tech Jobs

Information Security GRC Analyst

GEDU
London, United Kingdom
Today
£40,000 – £42,500 pa

Salary

£40,000 – £42,500 pa

Job Type
Permanent
Work Pattern
Full-time
Work Location
On-site
Seniority
Mid
Education
Degree
Posted
1 Jun 2026 (Today)

Benefits

33 days annual leave (including bank holidays) 1-day extra leave per year of service (up to 5 days) Buy/Sell additional holidays (up to 5 days) Pension Scheme Flexible Benefits (Cycle to Work, Workplace Nursery, Tech, Health, Dental and Life Assurance, Women's Health scheme) Discounts and Perks (Perks@Work discounts platform, Employee Assistance Programme, discounted gym membership, eyecare vouchers) Annual salary increase reviews Annual discretionary bonus £500 award Employee referral scheme
Share
Save job
Create job alert

Department: IT Infrastructure

Location: Greenford (UB6), West London

Type of Contract: Permanent

Working Pattern: Full-Time - 40 hrs Per Week

Salary Range: £40,000 to £42,500

Our Vision:Changing lives through education.

We’re looking for an Information Security GRC professional to join our team! If you have experience in risk, compliance, and frameworks like ISO 27001 or NIST, this is a great opportunity to make an impact across GBS and the GEDU Group.

Please note, we are unable to offer sponsorship for this position.

What the role involves:

  • Perform risk assessments in line with security best practice and GBS/GEDU information security policies and procedures.

  • Support the Information Security Manager in maintaining the corporate IS risk register and compiling monthly reporting to Senior Management via monthly and ad-hoc dashboards and summaries .

  • Support the Information Security Manager to implement ISO 27001 framework for GBS and GEDU Group.

  • Work with stakeholders to identify corrective action plans and reduce risks to acceptable levels.

  • Continually improve the information security risk assessment process and documentation.

  • Carry out third-party risk assessments for GBS and GEDU group.

  • Produce, update and review all information security policies, and provide appropriate training where needed.

  • Maintain and ensure compliance with all external regulatory requirements.

  • Track and report on external and internal information security audit findings to ensure successful closure and completion.

  • Maintain and assist in the regular update and provision of security awareness training to all levels of staff.

  • Assist in efforts to plan and track progress toward security certifications (e.g., Cyber Essentials Plus)

  • Assist with technical analysis and investigations by working collaboratively with technical analysts and the Information Security Manager

QUALIFICATIONS:

  • Bachelor’s degree in information technology, Computer Science, or a related field.

  • ISO 27001 Lead Implementor Certification /ISO 27001 Internal Auditor Certification. CGEIT/CRISC/CGRC Certification essential

ESSENTIAL SKILLS and EXPERIENCE:

  • Proven experience in implementing ISO 27001 compliance and Business Continuity/ITDR is mandatory.

  • Experience in working with Governance Risk Compliance (GRC) and GRC reporting

  • More than 5 years of experience in Information Security, Risk and IT

  • Experience in performing impact, likelihood and risk analyses / assessments.

  • Ability to ‘translate’ technical security issues into business risk.

DESIRABLE SKILLS and EXPERIENCE:

  • Knowledge of cyber audit and frameworks desirable

  • Ability to form complex communications/messages/policies in a simple, clear and concise manner to various stakeholders and interested parties

  • Analytical mindset and creative problem-solving links

What we offer:

  • Time off that fits your lifestyle – 33 days annual leave (including bank holidays), 1-day extra leave per year of service (up to 5 days) and Buy/Sell additional holidays (up to 5 days)
  • Opportunities forgrowth – tuition reimbursement for career development courses, wide variety of training courses
  • Pension Scheme and Flexible Benefits (via salary sacrifice) - Cycle to Work, Workplace Nursery, Tech, Health, Dental and Life Assurance schemes, Women's Health scheme (via Hertlity), and much more
  • Discounts, Perks and Employee Assistance:Perks@Work discounts platform, Employee Assistance Programme (EAP), discounted gym membership, eyecare vouchers and much more
  • Reward for your impact - annual salary increase reviews, annual discretionary bonus, £500 award, employee referral scheme

GBS is committed to equality, diversity and inclusion and providing a workplace free from discrimination or harassment. We welcome applications from all backgrounds and communities. We take our core values seriously and work hard to create an environment where everyone feels welcomed.

Related Jobs

View all jobs

Cyber Security Analyst - Fridays Off

eTech Partners London, United Kingdom
£65,000 – £70,000 pa Hybrid

Cyber Security Analyst - 1 day a week - Remote

eTech Partners London, United Kingdom
£65,000 – £70,000 pa On-site

Cyber Security Analyst - Fridays Off

eTech Partners London, United Kingdom
£65,000 – £70,000 pa On-site

Cyber Security Analyst - Fridays Off

eTech Partners Nottingham, United Kingdom
£65,000 – £70,000 pa On-site

Cyber Security Analyst

Nextech Essex, United Kingdom
£40,000 – £60,000 pa Hybrid

Cyber Platforms Senior Engineer

Connells Group HQ Mk78Jt, MK7 8JT, United Kingdom
On-site

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Products

Where to Advertise Cyber Security Jobs in the UK (2026 Guide)

Where to advertise cyber security jobs UK in 2026: the specialist boards, communities and channels that reach offensive, defensive and GRC security talent. The candidate pool is small, heavily vetted and in high demand across government, financial services, critical national infrastructure and the private sector simultaneously. Many of the strongest candidates hold active security clearances, are not actively job-searching through general platforms, and move primarily through specialist networks and trusted referrals. General job boards reach a broad audience but lack the specificity that security professionals expect. Specialist platforms, government-affiliated channels and cleared candidate networks each serve a different part of the market. This guide, published by CybersecurityJobs.tech, covers where to advertise cyber security roles in the UK in 2026, how the main platforms compare, what employers should expect to pay, and what the data says about hiring across different role types.

Jobs

Cyber Security Jobs UK 2026: What to Expect Over the Next 3 Years

Cyber Security Jobs UK 2026: roles, salaries and the threat intelligence, cloud security and zero-trust hiring trends shaping UK cyber careers. Cyber security is one of the few sectors where demand for talent has never once dipped. Every major technological shift of the past decade — cloud migration, remote working, AI adoption, the proliferation of connected devices — has expanded the attack surface that security professionals are expected to defend. And every expansion of that attack surface has generated more jobs. But the cyber security jobs market of 2026 is not simply a larger version of what it was three years ago. It is a structurally different market. The threats have evolved, the technologies used to combat them have changed, the regulatory environment has tightened considerably, and the roles being created reflect all of that. A job seeker who understands only the cyber security landscape of 2023 is already working with an outdated map. The candidates who will thrive over the next three years are those who understand where the sector is heading — which specialisms are attracting the most investment, which technologies are reshaping defensive and offensive security practice, and how the definition of a cyber security professional is broadening well beyond the traditional image of a network defender in a SOC. This article breaks down what the UK cyber security jobs market is likely to look like through to 2028 — covering the titles emerging right now, the technologies driving employer demand, the skills that will matter most, and how to position your career ahead of the curve.

🍪 Basic, anonymous analytics (aggregate counts only, never shared) are always on. Accept to also enable third-party tools — Google Analytics, Microsoft Clarity, Mixpanel, Leadfeeder — which help us match you with relevant Cyber Security roles. We never sell your data or use it for cross-site advertising. See our Cookie Policy.