Information Security (GRC) Analyst

Overview

In this role you support governance, risk and compliance across the business within Softcat’s Information Security function. You’ll help maintain audit-ready controls, records and evidence while collaborating with cross-functional teams. You’ll handle supplier due diligence, policy maintenance, and risk tracking to strengthen information security posture. This is an opportunity to build hands-on expertise in GRC while contributing to a culture that values growth and inclusion. You will work closely with the Information Security Manager and GRC Lead to enable our ambitious security strategy.

Pay / Benefits

• Hybrid working
• Flexible hours
• School pick-up/drop-off flexibility

Responsibilities

• Support information security governance, risk and compliance activities across the business
• Complete due diligence assessments on suppliers and maintain records through to completion
• Respond to standard customer assurance questionnaires with approved information and evidence
• Maintain security policies, procedures, evidence libraries and compliance records
• Support internal audits, control testing and tracking of corrective actions
• Update the Information Security Risk Register and follow up agreed actions
• Collect and validate information used in security metrics and reporting
• Support ISO 27001 and CE+ compliance activities including audit prep and evidence gathering

Key requirements

• Some relevant experience in information security, compliance, risk, audit, governance or a related area
• Strong organisational skills with accuracy and attention to detail
• Good written and verbal communication skills
• Confident using documents and spreadsheets to maintain records and support reporting
• Ability to manage several tasks, follow processes and meet deadlines
• Willingness to learn and develop a career in information security GRC

• Strong organisational skills
• Attention to detail
• Clear written and verbal communication
• Information security governance
• Risk and compliance management
• Audit support and evidence gathering

…