YunoJuno
Information Security Analyst
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Job Title: Information Security Analyst / GRC Analyst
Start Date: ASAP
Duration: 3–6 month contract (likely need the full 6 months)
Location: 2 days per week onsite in Cheltenham
Role Summary
The organisation is about to launch refreshed Modern Device Experience laptops to all colleagues. To support enhanced user experience, approved software and apps will be prepackaged for download.
Working as part of the wider Group Cyber Security Team as an Information Security GRC Analyst, you will help assess vendors, software and applications against third-party lifecycle frameworks, information security policies, standards and benchmarks.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
In addition, you will support the wider GRC teams with BAU activities and support tickets.
Key Responsibilities
- Assess vendors, software and applications against third-party lifecycle frameworks, information security policies, standards and benchmarks.
- Conduct customer and vendor security assessments.
- Support the assessment of risks and third parties.
- Assist with data protection impact assessments.
- Escalate risks and non-compliance appropriately.
- Support the wider GRC teams with BAU activities and support tickets.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Required Experience
- 2+ years' experience working in a GRC or Information Security role.
- Active involvement in customer and vendor security assessments.
- Good working knowledge of key frameworks, such as NIST CSF and ISO 27001.
- Experience of data protection impact assessments, assessing risk and third parties.
- Excellent communication skills.
- Ability to work independently to agreed processes and escalate risks and non-compliance appropriately.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills