Senior GRC Analyst

📋 Description

• Maintain the ISMS scope, Statement of Applicability, policies and supporting evidence.
• Support the Stage 1 and Stage 2 ISO 27001 audits; coordinate internal and external audits, findings
• Lead management reviews and report ISMS performance to the ISMS Governance Council.
• Own the risk method, register and treatment tracking, and facilitate assessments with risk owners.
• Coordinate recurring assurance, including access reviews, control testing, evidence collection and
• Monitor control performance and communicate key exposures, findings and remediation progress.

🎯 Requirements

• Experience running a management system or assurance programme, including evidence and auditor
• Practical information security risk management skills and the ability to build clear ownership
• Working knowledge of PCI DSS and GDPR or comparable privacy obligations.
• Experience with third-party security risk and customer assurance requests.
• Strong planning, stakeholder management and communication skills, with sound judgement on
• CISM, CISSP, ISO 27001 Lead Implementer or Lead Auditor certification (desirable).

🎁 Benefits

• Excellent Remuneration package
• 20% discount on Luxury Holidays
• Breakfast and lunch provided 5-days a week
• Health and Well-being programs
• Annual Hackathons!
• 1/2 day birthday bonus leave