Information Security GRC Analyst

UBDS

Information Security Analyst supporting the delivery of GRC services for leading clients. Strengthening cyber security posture through effective risk management and compliance assurance activities.

Posted 6/4/2026full-timeLondon • 🇬🇧 United KingdomMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

AWSAzureCloudCyber Security

About the role

Key responsibilities & impact

Support the delivery of cybersecurity governance, risk, and compliance activities, ensuring alignment with frameworks including ISO 27001, NIST Cybersecurity Framework, Cyber Essentials, and GovAssure.
Conduct information security risk assessments across business processes, programmes, projects, technology platforms, and third-party suppliers.
Maintain security risk registers, track remediation actions, and support the effective management of cyber risk across business and technology functions.
Produce high-quality security documentation, including policies, standards, compliance evidence, assessment reports, and executive-level reporting.
Support internal and external audits, control reviews, assurance activities, and compliance assessments.
Facilitate workshops and engage with stakeholders across technical, programme, operational, and leadership teams to gather requirements, collect evidence, and drive security initiatives.
Support supplier assurance and third-party risk management activities.
Assist with the development and continuous improvement of security governance processes and controls.
Support in embedding security best practices, data governance, and Secure by Design principles across recovery, transformation, and operational workstreams.
Contribute to security awareness, risk reporting, and governance activities across the client environment.

Requirements

What you’ll need

3–5 years' experience in Information Security, Cyber Security, Governance, Risk & Compliance, IT Audit, or Risk Management roles.
Experience conducting information security risk assessments and control reviews.
Strong understanding of information security governance and risk management principles.
Working knowledge of ISO 27001 and information security management systems.
Familiarity with security frameworks and standards including NIST Cybersecurity Framework and Cyber Essentials.
Experience supporting audit, compliance, or assurance activities.
Strong stakeholder engagement and communication skills.
Excellent report writing, documentation, and presentation capabilities.
Ability to communicate complex security concepts to both technical and non-technical audiences.
Able to work in London 2-3 days per week.
Desirable
Experience working within government, public sector, regulated, or enterprise environments.
Knowledge of GovAssure assessments and public sector security requirements.
Familiarity with cloud environments including Microsoft Azure and AWS.
Experience using GRC platforms and risk management tooling.
Understanding of Secure by Design and security architecture principles.

Benefits

Comp & perks

**Why people choose to grow their careers at UBDS Group**
Professionals choose to grow their careers at UBDS Group for its reputation as a dynamic and forward-thinking organisation that is deeply committed to both innovation and employee development. At UBDS Group, employees are given unique opportunities to work on cutting-edge projects across a diverse range of industries, exposing them to new challenges and learning opportunities that are pivotal for professional growth. The Group’s culture emphasises continuous improvement, offering ample training programs, mentorship, and the chance to gain certifications that enhance their skills and marketability.
UBDS Group fosters a collaborative environment where creativity and innovation are encouraged, allowing employees to contribute ideas and solutions that have a tangible impact on the company and its clients. This combination of professional development, a culture of innovation, and the opportunity to make meaningful contributions makes UBDS Group an attractive place for those looking to advance their careers and be at the forefront of technological and operational excellence.
**Employee Benefits**
- Training – All team members are offered a number of options in terms of personal development, whether it is technical led, business acumen or methodologies. We want you to grow with us and to help us achieve more
- Private medical cover for you and your spouse/partner, offered via Vitality
- Discretionary bonus based on a blend of personal and company performance
- Holiday – You will receive 25 Days holiday, plus 1 day for Birthday and 1 day for your work anniversary in addition to UK bank holidays
- Electric Vehicle leasing with salary sacrifice
- Contributed Pension Scheme
- Death in service cover

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

information securitycybersecurityrisk managementISO 27001NIST Cybersecurity FrameworkCyber Essentialssecurity risk assessmentsauditcomplianceSecure by Design

Soft Skills

stakeholder engagementcommunication skillsreport writingdocumentationpresentation capabilitiesability to communicate complex concepts