Senior Security Assurance Analyst (GRC)

Job Title Senior Security Assurance Analyst Role Purpose Support the Security Governance & Assurance Lead in managing security risk, governance, compliance and assurance across mainframe, on-premise, infrastructure, applications, SaaS and cloud environments. Key Responsibilities Security governance and assurance reviews Maintain security risk registers and remediation tracking Project security oversight and security review coordination Audit support, evidence collection and compliance monitoring Management reporting, dashboards and KPI/KRI reporting Stakeholder engagement across technology and business teams Essential Experience 7+ years in Information Security, IT Risk, Audit, Governance or Compliance Enterprise technology environment experience Audit and remediation management experience Policy and control compliance assessment experience Management reporting and stakeholder engagement Technical Knowledge ISO 27001, NIST, CIS Controls, COBIT, ITIL Cloud platforms (Azure preferred) On-prem infrastructure and identity management Network security, SaaS and data protection principles Awareness of mainframe environments Core Competencies Risk-based decision making Analytical thinking Stakeholder management Attention to detail Communication skills Organisational skills Preferred Qualifications CISA CRISC CISSP CISM ISO 27001 Lead Auditor/Implementer ITIL Foundation Success Measures 95%+ project security review coverage 100% audit findings tracked to closure 10% overdue remediation actions Reduction in aged high/critical risks Reduction in repeat audit findings

CIS, ISO 27001, Security Governance