Chaucer Group
Information Security GRC Analyst
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Information Security Governance, Risk and Compliance Analyst
About Chaucer
Chaucer is a leading insurance group at Lloyd’s, the world’s specialist insurance market. We help protect industries around the world from the risks they face. Our customers include major airlines, energy companies, shipping groups, global manufacturers and property groups.
Headquartered in London, with international hubs in Copenhagen, Dubai, Miami, Dublin, Singapore, Sydney and Bermuda, we position ourselves close to our clients across the world.
Visit our website: www.chaucergroup.com
Job Profile Summary
The Information Security Governance Risk and Compliance Analyst sits within the corporate Information Security team, led by the Information Security Officer and operates within the COO organisation. This independent role (isolated from compliance, risk, and IT functions) reports to the Head of Information Security Governance Risk and Compliance. The focus is on driving forward information security audit findings, compliance deliverables, and regulatory commitments.
This includes:
- Tracking open items
- Holding action owners accountable
- Ensuring the information security function meets obligations across audit and compliance workstreams
Core Activities:
- Coordinates across ISO 27001 audits, penetration tests, and tabletop exercises
- Ensures remediation has clear owners, deadlines, and accountability
- Manages inputs for Lloyd’s Principles-Based Oversight (PBO), DORA, GDPR, and regulatory engagements with:
- Monetary Authority of Singapore (MAS)
- Central Bank of Ireland (CBI)
- Dubai Financial Services Authority (DFSA)
Characteristics of a Successful Candidate:
- Organised, persistent, equipped to hold people accountable proficiently
- Proactively grows within a mid-level role with opportunities to advance
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Responsibilities
- Track and drive remediation of all information security-related findings (internal audits, ISO 27001 audits, penetration tests, tabletop exercises).
- Maintain accurate registers, enforce deadlines, and escalate missed targets.
- Serve as the primary point of contact for regulations such as Lloyd’s PBO (especially cyber resilience), DORA, and GDPR.
- Coordinate evidence and inputs for regulatory engagements across jurisdictions (MAS, CBI, DFSA).
- Chase and track all compliance deliverables, ensuring on-time responses to regulators, compliance teams, and audits.
- Prepare clear progress updates for stakeholders on open findings and action items.
- Assist the Head of Information Security Governance Risk and Compliance with GRC tooling and reporting, producing insights on:
- Progress on open items
- Compliance status
- Deadline adherence
- Build positive relationships with colleagues (risk, audit, compliance, business teams) to improve responsibility acceptability—focusing on shared progress rather than confrontation.
Skills and Experience
Ideal Background:
- Hands-on experience in Information Security Governance Risk Compliance (GRC), IT audit, IT risk, or compliance coordination.
- Preference given to candidates from insurance/reinsurance or Lloyd’s market sectors.
Technical Proficiencies:
- Practical understanding of ISO 27001 and remediation processes during formal audits.
- Supportive knowledge of regulatory systems like:
- Lloyd’s PBO
- DORA
- International financial regulators (e.g., MAS, CBI, DFSA routine supervision).
Organisational & Attitudinal Skills:
- Exceptional track-record managing multiple open items, deadlines, and dependencies across diverse teams.
- Clear, concise communication to create compelling updates and foster collaborative relationships.
- Ability to engage smoothly with all personnel levels.
- Contact with GRC platforms and tracking tools; confidence pulling useful reporting from them.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Impact of the Role
Audit findings and regulatory requirements require active management to close. Without careful proactive tracking, risks escalate, deadlines slip, and issues may go unnoticed unchecked—causing potential disruptions or financial/carrier impacts.
In a globally wholesale insurance entity such as Chaucer, the information security GRC accountability owner is pivotal to sustaining regulatory compliance and operational security. This role offers unique exposure:
- Experience with ISO 27001 certification, Lloyd’s PBO, DORA, international regulatory engagement, and the audit lifecycle.
- Direct guidance from the Head of Information Security Governance Risk and Compliance for career development.
A excellent opportunity for individuals desiring to build a career in GRC.
Why Join Chaucer?
Chaucer is a global insurer operating in both Lloyd’s and company markets, specialising in:
- Risk management for nuclear, shipping, manufacturing, and property sectors.
- Financing enterprises worldwide.
Growth highlights:
- Annual income evolution: from £1.4 billion (2019) to £3.5 billion (2024).
- Strong cultural alignment built on strategic teamwork, platforms, and traditions.
Benefits of Joining Chaucer:
- Hybrid work: A flexible model supporting both personal and team productivity.
- Passionate employment model: A diverse, inclusive culture celebrating all backgrounds whilst championing professional development.
- Comprehensive (non-contributory) benefits robust support for:
- Health and medical coverage
- Life assurance
- Pension provision
- Flexible holidays
- Dedicated well-being initiatives.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location