Job Requirements

Information Security GRC Analyst

Are you our next Information Security GRC Analyst? Due to business growth, we are looking for someone who can help us redefine what's possible for our cyber security, compliance, and governance here at London Gatwick.

If you have a passion for Cyber and Information Security, are analytical with strong attention to detail and can work collaboratively with wider stakeholders this role has lots to offer.

As part of our 'Grow with Gatwick' initiative you'll be provided with plenty of training and support to ensure you're developing and growing your career.

What is the role?

This role supports the governance, risk and compliance functions relating to cyber & information security (IS), ensuring legal, regulatory, and internal governance requirements are met; that information and cyber risks are assessed and managed and that our security controls align with both external best practice standards and internal policies.

What will you do? (Accountabilities)

• Assess and evaluate the information security risks including supply chain due-diligence and conducting security impact assessments.
• Provide guidance in line with policy to project teams regarding information assurance compliance or IT security.
• Maintain GAL's Information Security Management System (ISMS)
• Supporting internal and external audit processes
• Coordinate the cyber awareness campaigns and refresh of related training modules.

Do you have what we're looking for? (Skills & experience)

• In-depth experience of conducting information risk assessments and business impact analysis, alongside working with information security best practice standards and policies.
• In-depth understanding and experience of information security related regulations including NIS Directive, GDPR, PCI-DSS.
• Experience of working with Information Security controls and frameworks such as NIST and ISO27001.
• Experience of reviewing and understanding commercial legal contracts and agreements.
• Strong understanding of the commercial implications of cyber & information security actions and decisions with a willingness to challenge existing cyber security practices.
• Experience of working within an IT environment, including change, problem and incident management and response.
• Excellent verbal and written communication skills, ability to deliver information to both technical and non-technical colleagues.
• The ability to multi-task and prioritise workload based on impact and risk.
• Proven ability to work under pressure with minimal supervision, particularly when dealing with high impact incidents.
• An Information Security Qualification is beneficial
• Information Risk Management - desirable

What's it like to work here?

Our employees tell us that working here is something special. Everyone is looking to deliver what matters to our passengers. There is so much that makes air travel possible. No day is like another. Our employees enjoy a range of personal, health and financial benefits, including annual leave and high street discounts. We offer a performance-based bonus scheme and our people can request professional training to support them to Grow with Gatwick

We want our people to reflect our local community and the passengers we serve. We know we are all at our best when we feel comfortable and included. We want our people to feel like they can be who they want to be at work, and we work hard to provide them with the respect and flexibility to do so.

We aim to be an equitable, diverse, and inclusive employer. We encourage and support our people to be their best. We seek different perspectives that redefine what's possible. Together we are a team.

Click apply and complete your application. We'll be in touch soon.