Information Security Analyst

Make an Impact at RSM UK We are looking for an Information Security GRC (Governance, Risk, and Compliance) Analyst to join our National Technology team at RSM UK. This role can be based in our London, Gatwick or Stoke office and will be responsible for developing, implementing, and maintaining a robust information security governance, risk management, and compliance program. This role involves assessing and managing risks, ensuring compliance with relevant regulations and standards, and promoting a culture of security awareness across the organization. You’ll make an impact by: Assisting with the day-to-day management and maintenance of the Information Security Management System including the development and maintenance the current information security policies, standards, and procedures Conducting risk assessments and identifying potential security threats and vulnerabilities, including risk assessments for projects and new initiatives Assisting with the completion of questionnaires for new and existing clients Conducting supplier assurance activities including conducting visits to existing and new suppliers, conducting due diligence, reviewing new software and services, and assessing existing suppliers Monitoring and ensuring compliance with relevant regulations, standards, and frameworks (e.g., ISO 27001, Cyber Essentials Plus) Collaborating with various departments to ensure security controls are implemented and maintained Conducting regular internal information security audits and assessments to evaluate the effectiveness of security controls