Trayport Logo

Trayport

GRC Analyst

Posted One Month Ago
In-Office
London, Greater London, England, GBR
Junior
In-Office
London, Greater London, England, GBR
Junior
Supports governance, risk, and compliance activities by maintaining security policies, coordinating audits, tracking risk actions, monitoring incidents, producing control-effectiveness reports, and promoting information security awareness. The role collaborates with stakeholders to support ISO 27001, DORA, GDPR, and other security framework requirements while improving cybersecurity processes and controls.
The summary above was generated by AI
The Role
We are seeking an individual eager to expand their expertise in Governance, Risk, and Compliance (GRC). This
role supports the GRC team in safeguarding company data and operations by helping to implement, monitor, and
enhance security controls. You will collaborate closely with stakeholders and cross-functional teams to ensure
compliance with key security frameworks such as ISO27001, as well as regulations like DORA and GDPR.
While this position is not technical, it offers an excellent opportunity for someone looking to grow their GRC skills
and expand their knowledge in Cybersecurity.

Key Responsibilities:

● Champion Information Security awareness across the organization through initiatives such as

cybersecurity awareness campaigns, annual training sessions, and regular InfoSec news bulletins.

● Assist in the maintenance and update of security policies within the Information Security Management

System (ISMS) alongside the InfoSec management team.

● Coordinate and manage logistics for both internal and external audits.

● Support compliance assessments and audits, ensuring effective engagement with relevant stakeholders.

● Identify opportunities for continuous improvement in security practices and processes.

● Review and track risk actions, working with owners to ensure timely updates.

● Monitor Information Security Incidents, liaising with incident handlers to ensure accurate and timely

reporting.

● Produce reports, metrics, and dashboards to evaluate and report on the effectiveness of security controls.


The Ideal Person:

● 1-2 years of experience in a GRC or Information Security Analyst role.

● Familiarity with ISO27001 or other security standards and frameworks like SOC or NIST is advantageous

but not required.

● Strong interpersonal and communication skills, with the ability to simplify complex issues for stakeholders

at all levels.

● Self-motivated, with a genuine passion for learning more about Cybersecurity.

● A proactive problem-solver with a keen eye for detail.

Location Useful Links

Trayport is committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate. We provide accommodations for applicants and employees who require it.

HQ

Trayport London, England Office

7th Floor, 9 Appold Street, London, United Kingdom, EC2A 2AP

Similar Jobs

13 Days Ago
In-Office
Entry level
Entry level
Automation • Manufacturing
Supports governance, risk, and compliance operations by maintaining ISO 27001 information security practices, policies, controls, audits, and accreditations. Monitors security alerts, data loss prevention, and potential exfiltration; analyzes compliance data; supports Microsoft Purview tooling; and collaborates with stakeholders on regulatory requirements, security training, and organizational security improvements.
Top Skills: AzureMicrosoft PurviewMicrosoft Sql Server
25 Days Ago
In-Office or Remote
United Kingdom
Mid level
Mid level
Database
Manage company-wide risk assessments, risk registers, remediation tracking, control testing, audits, evidence collection, and SOC 2 and ISO 27001 compliance operations. Partner with engineering, security, IT, and legal to validate controls, automate evidence gathering, investigate failures, support customer and vendor security reviews, and improve continuous compliance practices in a fully remote environment.
Top Skills: AWSDrataGCPGoogle WorkspaceIso/Iec 27001:2022OktaSoc 2Vanta
One Month Ago
In-Office
London, Greater London, England, GBR
Senior level
Senior level
Cloud • Software
Own Procore’s Cyber Essentials and Cyber Essentials Plus certification program end to end. Responsibilities include defining scope, validating technical security controls across devices, networks, cloud services, and accounts, driving remediation, coordinating certification audits, aligning compliance frameworks, improving evidence processes through automation, and reporting readiness and risks to leadership.
Top Skills: AWSCyber EssentialsCyber Essentials PlusGrc PlatformsIntuneIso 27001Nist CsfOktaSoc 2

What you need to know about the London Tech Scene

London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account