Senior Security Assurance Analyst (GRC)

Job Summary

Job Title Senior Security Assurance Analyst Role Purpose Support the Security Governance & Assurance Lead in managing security risk, governance, compliance and assurance across mainframe, on-premise, infrastructure, applications, SaaS and cloud environments.

Key Responsibilities

• Security governance and assurance reviews
• Maintain security risk registers and remediation tracking
• Project security oversight and security review coordination
• Audit support, evidence collection and compliance monitoring
• Management reporting, dashboards and KPI/KRI reporting
• Stakeholder engagement across technology and business teams

Essential Experience

• 7+ years in Information Security, IT Risk, Audit, Governance or Compliance
• Enterprise technology environment experience
• Audit and remediation management experience
• Policy and control compliance assessment experience
• Management reporting and stakeholder engagement
• Technical Knowledge: ISO 27001, NIST, CIS Controls, COBIT, ITIL
• Cloud platforms (Azure preferred)
• On-prem infrastructure and identity management
• Network security, SaaS and data protection principles
• Awareness of mainframe environments

Core Competencies

• Risk-based decision making
• Analytical thinking
• Stakeholder management
• Attention to detail
• Communication skills
• Organisational skills

Preferred Qualifications

• CISA
• CRISC
• CISSP
• CISM
• ISO 27001 Lead Auditor/Implementer
• ITIL Foundation

Success Measures

• 95%+ project security review coverage
• 100% audit findings tracked to closure
• 10% overdue remediation actions
• Reduction in aged high/critical risks
• Reduction in repeat audit findings

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.