Information Security GRC Specialist Role - Insurance, The City, London

We are looking for an experienced Senior Information Security GRC Specialist to join an established and expanding cyber security team. This is a senior role with broad responsibility across security governance, risk and compliance, working closely with both technology and business stakeholders to strengthen the organisation’s overall security posture.

Key Responsibilities

• Contribute to the development and ongoing delivery of the organisation’s information security strategy and governance approach.
• Manage cyber and information security risk activities, including risk assessments, control reviews, audits and remediation.
• Develop, review and maintain security policies, standards, controls and risk documentation.
• Maintain oversight of security risks and ensure appropriate actions are tracked through to resolution.
• Produce meaningful reporting on cyber risk, control performance, compliance and key security indicators.
• Help ensure alignment with relevant regulatory requirements and recognised frameworks, including NIST, GDPR and DORA.
• Work with business and technology teams to provide practical security and risk guidance.
• Support security awareness and education activities across the organisation.
• Contribute to security incident management, lessons learned and the ongoing improvement of security processes.
• Provide senior-level GRC support and leadership cover when required.