JOBILY AI SUMMARY
What you'll do
- Own and maintain ISO 27001 certification and compliance across relevant security frameworks.
- Develop and maintain information security policies and procedures.
- Lead vendor risk management and client security assessments, including security questionnaires and onboarding requirements.
- Build and maintain the security trust portal using tools such as Drata or Vanta.
- Deliver security awareness training and internal communications to promote a strong GRC culture.
Key requirements
- 3+ years' experience
- ISO 27001 certification and compliance; Security frameworks
- Security policies and procedures
- Vendor risk management; Client security assessments; Security questionnaires
- Security trust portals; Drata or Vanta
- SaaS security; AI security; Cloud security
- Information security compliance; Information security governance, risk and compliance
Benefits
- 25 days’ annual leave plus office closures over the holidays;
- health cash plan, enhanced family benefits, carer days, and mental health support.
- Competitive salary, reward and recognition programmes, phone contract, accredited learning, leadership development, global career mobility, DE&I initiatives, volunteering opportunities, donation matching, and payroll giving.
About the job
At GWI we're always looking for extraordinary people who thrive on making an extraordinary impact. Right now we're looking for an Information Security GRC Specialist to play a key role in our Legal team in London. If that's you, and making a difference gets you out of bed in the morning, keep…




