Farrer & Co
Junior Information Security GRC Analyst
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Junior Information Security GRC Analyst
Scope
The Junior Information Security Analyst will support the Information Security and Risk & Compliance function in maintaining and enhancing the firm’s Information Security Management System (ISMS) and wider governance framework.
The role will assist with information security governance, risk management, supplier assurance, client due diligence, audit preparation, policy management, reporting, and security awareness activities. The successful candidate will work closely with stakeholders across the firm to support compliance with information security, regulatory, and client requirements.
This role provides an excellent opportunity for an individual looking to develop a career in Information Security Governance, Risk, and Compliance (GRC) while gaining exposure to ISO 27001 and other relevant certifications, supplier assurance, risk management, audit activities, and information security best practices.
Responsibilities
- Support the administration and continual improvement of the Information Security Management System (ISMS).
- Assist with ISO 27001 certification (and other relevant certifications), surveillance, and internal audit activities.
- Coordinate the collection of audit evidence and support remediation tracking activities.
- Support the management and maintenance of information security policies, standards, procedures, and supporting documentation.
- Support the maintenance of information security risk, treatment, action, and exception tracking records.
- Coordinate and manage client information security due diligence questionnaires and requests for assurance information.
- Support third-party supplier assurance and risk assessment activities.
- Support the production of information security metrics, dashboards, management reporting, and ISMS objective reporting.
- Assist with security awareness, communications, and training initiatives across the firm.
- Support the maintenance of information security governance documentation, registers, and tracking mechanisms.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Skills and Experience
Essential:
- Understanding of information security, risk management, and governance principles.
- Strong organizational and administrative skills.
- Excellent written and verbal communication skills.
- Strong attention to detail and ability to work accurately.
- Ability to manage multiple priorities and meet deadlines.
- Strong analytical and problem-solving skills.
- Proficient in Microsoft Office applications, including Word, Excel, PowerPoint, and Outlook.
- Ability to build effective working relationships with stakeholders across the firm.
- Self-motivated with a willingness to learn and develop within Information Security and Risk & Compliance.
Desirable:
- Experience in one or more of the following would also be advantageous:
- Knowledge of ISO 27001 or other information security frameworks.
- Experience supporting audits, compliance activities, or governance processes.
- Experience working within Information Security, Risk, Compliance, Governance, or a related function.
- Awareness of supplier assurance and third-party risk management processes.
- Experience creating reports, dashboards, or management information.
- Relevant qualifications or certifications such as CISM, ISO 27001 Foundation, or similar.
Special aspects
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Happy to talk flexibly. This role is suitable for individuals looking to work a minimum 0.6 FTE. Flexible working patterns will be considered within the firm’s agile working framework.
- The hours of work for this opportunity are 09:30 am - 5:30 pm but it is essential to be committed, flexible, and prepared to work beyond the normal office hours when necessary and in response to client demand.
- Farrer & Co operates an agile working framework under which members of the firm are expected to spend at least 40% of their working hours in the office. This is a minimum expectation: individuals may elect or be asked or expected to work more frequently in the office, depending on circumstance.
- Overtime at weekends will be required from time-to-time in order to support project work.
- We expect the successful applicant to bring the experience, commitment, and passion to further define the job description and embed the principles of good Information Security in the culture of the firm.
- Farrer & Co is an equal opportunity employer that welcomes applications from candidates from all backgrounds. We look to employ the best candidates regardless of age, gender, race, ethnicity, social or economic background, religion, disability, sexual orientation, national origin, or any other protected characteristic.
- We are keen to ensure candidates have the best interview experience possible; if you require any adjustments during the interview or application process please let the recruitment team know.
Comments
Farrer & Co conducts a pre-employment screening which includes a Criminal History Background and Credit Check for successful candidates.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location