Information & Cyber Security Executive (GRC)

Job Role: Information & Cyber Security Executive (GRC)Locations: London or Sussex (1-2 days per week)Salary: £70,000 - £85,000 + bonus & benefitsLutine Bell are working with a leading UK Financial Services organisation who are looking to appoint a Information & Cyber Security Executive (GRC) to join the wider Risk function.You will ensure compliance with regulatory and legal obligations while managing technology and information security risks across the business. In this role, you’ll collaborate with teams to strengthen operational resilience, evaluate third-party technology providers, and support incident response and investigations.Responsibilities:Undertake security assessments of control effectiveness across the controls set out in ISO IEC 27002:2022, finding any vulnerabilities or weakness in controls to first line and monitoring progress on remediation recording against the risks in decision focus.Assess compliance with information security policies and standards.Monitors and measures the effectiveness of specific security controls as required by organisational policy and local risk assessmentsPerforms basic risk and vulnerability assessments for information systems and may contribute to vulnerability assessments.Investigates suspected attacks.Experience:Prior Financial Services Experience Risk Management Expertise – Understanding of technology risk management; familiarity with enterprise-wide risk frameworks is a plusCyber Security Knowledge – Solid understanding of cyber/information security frameworks such as NIST and ISO/IEC 27002:2022Strong Communication Skills – Ability to translate technical concepts into accessible language for a variety of stakeholders