Rodeo
Get started

GEDU

Information Security GRC Analyst

London
£40k – £42.5k/yr
Posted 2 days ago
Sign up to applySee more jobs like this

How your CV stacks up

1Upload CV
2Analyse CV
3Improve CV

Upload your CV to see how well it fits this job role

?%

Department: IT Infrastructure

Location: Greenford (UB6), West London

Type of Contract: Permanent

Working Pattern: Full-Time - 40 hrs Per Week

Salary Range: £40,000 to £42,500


Our Vision:

Changing lives through education.

We’re looking for an Information Security GRC professional to join our team! If you have experience in risk, compliance, and frameworks like ISO 27001 or NIST, this is a great opportunity to make an impact across GBS and the GEDU Group.

Please note, we are unable to offer sponsorship for this position.


What the role involves:

  • Perform risk assessments in line with security best practice and GBS/GEDU information security policies and procedures.
  • Support the Information Security Manager in maintaining the corporate IS risk register and compiling monthly reporting to Senior Management via monthly and ad-hoc dashboards and summaries.
  • Support the Information Security Manager to implement ISO 27001 framework for GBS and GEDU Group.
  • Work with stakeholders to identify corrective action plans and reduce risks to acceptable levels.
  • Continually improve the information security risk assessment process and documentation.
  • Carry out third-party risk assessments for GBS and GEDU group.
  • Produce, update and review all information security policies, and provide appropriate training where needed.
  • Maintain and ensure compliance with all external regulatory requirements.
  • Track and report on external and internal information security audit findings to ensure successful closure and completion.
  • Maintain and assist in the regular update and provision of security awareness training to all levels of staff.
  • Assist in efforts to plan and track progress toward security certifications (e.g., Cyber Essentials Plus)
  • Assist with technical analysis and investigations by working collaboratively with technical analysts and the Information Security Manager

Reasons to use Rodeo

I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?

Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.

Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.

Start with a chat, not a search bar

Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.

P

Graduate Consultant — 2026 Scheme

PwC·London, UK
£35,000/yr

Why you're a good match

Strong

Your economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.

See breakdown
Save jobNot relevant
View details

It searches the market for you

Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.

Why you're a good match

You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.

See breakdown
Strong

Experience fit

Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.

See breakdown
Strong

Only hits

No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.


QUALIFICATIONS:

  • Bachelor’s degree in information technology, Computer Science, or a related field.
  • ISO 27001 Lead Implementor Certification /ISO 27001 Internal Auditor Certification. CGEIT/CRISC/CGRC Certification essential

ESSENTIAL SKILLS and EXPERIENCE:

  • Proven experience in implementing ISO 27001 compliance and Business Continuity/ITDR is mandatory.
  • Experience in working with Governance Risk Compliance (GRC) and GRC reporting
  • More than 5 years of experience in Information Security, Risk and IT
  • Experience in performing impact, likelihood and risk analyses / assessments.
  • Ability to ‘translate’ technical security issues into business risk.

DESIRABLE SKILLS and EXPERIENCE:

  • Knowledge of cyber audit and frameworks desirable
  • Ability to form complex communications/messages/policies in a simple, clear and concise manner to various stakeholders and interested parties
  • Analytical mindset and creative problem-solving links

Get help with your application

Your very own career expert that helps elevate your application to the next level.

Get help applying for this job

What we offer:

  • Time off that fits your lifestyle – 33 days annual leave (including bank holidays), 1-day extra leave per year of service (up to 5 days) and Buy/Sell additional holidays (up to 5 days)
  • Opportunities for growth – tuition reimbursement for career development courses, wide variety of training courses
  • Pension Scheme and Flexible Benefits (via salary sacrifice) - Cycle to Work, Workplace Nursery, Tech, Health, Dental and Life Assurance schemes, Women's Health scheme (via Hertlity), and much more
  • Discounts, Perks and Employee Assistance: Perks@Work discounts platform, Employee Assistance Programme (EAP), discounted gym membership, eyecare vouchers and much more
  • Reward for your impact - annual salary increase reviews, annual discretionary bonus, £500 award, employee referral scheme

GBS is committed to equality, diversity and inclusion and providing a workplace free from discrimination or harassment. We welcome applications from all backgrounds and communities. We take our core values seriously and work hard to create an environment where everyone feels welcomed.


GEDU Global Education is a dynamic and innovative group of education providers. Across our institutions, programmes are designed to have a direct impact on the lives of our students, apprentices and trainees; to equip them with the skills, knowledge and experience necessary for success in their chosen field.

Trusted by 25,000+ job seekers

“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”

Jessica, London

Get help applying for this job

Skills

ISO 27001
Risk Assessment
GRC Reporting
Third-Party Risk Management
Information Security Policy
Business Continuity
IT Disaster Recovery
Cyber Essentials Plus
NIST Framework
Internal Auditing
Stakeholder Management
Security Awareness Training

Location

London, England, United Kingdom

Sign up to applySee more jobs like this