GRC Analyst

- Plan, conduct, and document internal ISO 27001 audits across all areas of the Information Security Management System (ISMS), ensuring all controls and processes are regularly reviewed for effectiveness and compliance - Evaluate the effectiveness of information security policies, procedures, and controls, and identify areas for improvement or non-compliance - Develop and maintain an annual audit schedule to ensure comprehensive coverage of ISO 27001 requirements and continual improvement of the ISMS - Conduct and document internal audits and assessments aligned to ISO 27001 and NIS Regulations - Contribute to the development and maintenance of cyber security policies, standards, and procedures - Assist in maintaining the IT Security risk register, including identifying, assessing, and monitoring - Work closely with business stakeholders to gather evidence, close audit findings, and track corrective actions - Support security assurance activities, including penetration tests, vulnerability scans, and third-party reviews - Promote strong cyber security awareness and contribute to a positive security culture - Ensure third-party suppliers meet contractual and regulatory security requirements - Maintain compliance with relevant legislation and industry standards - Monitor adherence and enforce policies to safeguard organisational data