Job Description

Information Security Analyst (GRC)
Location: Greater London
Employment Type: Full-time
PCD280129

Role Overview
Job title: Information Security Analyst (GRC).

Additional Information
• Package: Annual Company Bonus, Company Pension Plan, PMI, Life Assurance, Critical Illness.
• We are looking for a Security Analyst with expertise in data governance and data security to help safeguard our information assets across cloud and on-premise environments. You'll support the implementation and ongoing enhancement of policies, controls, and monitoring frameworks that ensure compliance with internal standards, regulatory requirements, and industry best practices.
• Here's what you'll be doing.
• Data Security Operations.
• Monitor and analyze data access logs for anomalies and unauthorised activities.
• Implement and conduct regular data classification and access reviews across our teams.
• Implement and enforce data loss prevention (DLP) and encryption controls.
• Coordinate vulnerability assessments and remediation related to sensitive data.
• Support the development and enforcement of data governance frameworks, including policies, standards, and classification schemes.
• Ensure alignment with GDPR, HIPAA, CCPA, and other relevant data protection regulations.
• Collaborate with legal, compliance, and data owners to assess data handling risks.
• Participate in audits and assist with responses to regulatory inquiries and findings.
• Help complete third-party risk reviews and audits.
• Provide input to risk assessments and risk registers.
• Track and remediate risks related to data storage, sharing, and processing.
• Maintain up-to-date records of data flows, repositories, and critical data assets.
• Security Tools, Monitoring, Reporting.
• Experience with cloud security and GRC tools. Configure alerts and automate controls to detect data security violations.
• Create risk-based reporting and dashboards.
• Partner with the Security Operations Centre (SOC) to respond to incidents involving sensitive data.