Information Security GRC Specialist

INFORMATION SECURITY GRC SPECIALIST Buckinghamshire | Hybrid Working (Flexible Days) Contract: Permanent Salary: Up to £65,000 BONUS Reports to: GRC Manager Individual Contributor Role – No Direct Reports Are you a security governance expert looking to play a crucial role in an evolving and high-impact environment? We are seeking an Information Security GRC Specialist to join our InfoSec Governance, Risk and Compliance (GRC) team. In this role, you’ll help protect the confidentiality, integrity, and availability of our information assets by embedding best-in-class governance practices, assessing risk, and ensuring compliance with key industry standards like ISO27001. You'll work across the business as a trusted security advisor, helping teams understand and manage their risk profile and compliance obligations. What You’ll Bring A strong understanding of the current threat landscape, security risks, and compliance standards. Extensive experience in information security, ideally within a GRC or risk management role. Experience delivering risk assessments and managing compliance against standards like ISO27001. Skilled in writing and implementing security policies, standards, and procedures. Working knowledge of frameworks such as ISF, NIST, ISO, and ITIL. Excellent communication skills with the ability to convey risk in accessible, business-friendly terms. Strong prioritisation and problem-solving skills under pressure. Desirable Certifications CISSP – Certified Information Systems Security Professional CISA – Certified Information Systems Auditor CRISC – Certified in Risk and Information Systems Control Why Join? You’ll play a pivotal role in shaping the security culture and risk posture of the organisation while working in a collaborative, forward-thinking environment. If you’re ready to bring your GRC expertise to a role that truly makes a difference—we want to hear from you. Apply now and help build a secure, resilient future.