Information Security Governance, Risk and Compliance Specialist
Likely
Sponsorship likelihood
This employer has issued visas recently
Not disclosed
Salary
Not disclosed by employer
£48,500
Going rate
Skilled Worker going rate
This role may qualify for a Skilled Worker visa
SOC 2135 is an eligible occupation, but we are only 48% sure that is the right code. GWI is a licensed sponsor, so if the code fits, the role should qualify. Check the occupation eligibility rules against what the job actually involves.
We pick the code from the advert's text, so it is our best guess, not the employer's. Each code it could be has its own likelihood:
- Likely 2135 (Cyber security professionals) · 48% match
- Likely 2482 (Quality assurance and regulatory professionals) · 43% match
New graduate or PhD holder? Pick one of the lower rates.
What each route needs for this job
| Occupation code | New entrant 70% of going rate | STEM PhD 80% of going rate | Relevant PhD 90% of going rate | Standard rate 100% of going rate |
|---|---|---|---|---|
2135 Cyber security professionals Most likely code | £34,000 | £38,800 | £43,700 | £48,500 |
2482 Quality assurance and regulatory professionals Also possible | £33,800 | £38,600 | £43,400 | £48,200 |
We use the lowest threshold across the plausible codes. Likelihood is Possible at most when the pay clears only a lower rate, or only under a less likely code. How the Home Office picks the code
About the role
Location: London, UK
Weekly office requirement: Hybrid – 2 days per week
Employment type: 6 months fixed term contract, immediate start
At GWI we're always looking for extraordinary people who thrive on making an extraordinary impact. Right now we're looking for an Information Security GRC Specialist to play a key role in our Legal team in London. If that's you, and making a difference gets you out of bed in the morning, keep reading. It could be the start of something, well, extraordinary.
Sounds great, what will I be doing? 🤔
As our Information Security GRC Specialist you'll play a pivotal role in shaping the future of security compliance at GWI. Reporting into our General Counsel and working closely with our Information Security, Product, and Technology teams, you'll own our compliance posture across security frameworks, vendor risk, and client-facing security requirements — while building a security-conscious culture across the business.
A few things you'll be responsible for:
👉 Own and maintain GWI's ISO 27001 certification and compliance across relevant security frameworks, keeping our posture sharp as the threat landscape evolves.
👉 Develop, implement, and maintain information security policies and procedures aligned with industry best practices.
👉 Lead vendor risk management and client security assessments — including responding to client security questionnaires and onboarding requirements.
👉 Build and maintain GWI's security trust portal, showcasing our credentials to clients and stakeholders using tools such as Drata or Vanta.
👉 Drive security awareness across the business through training programmes and internal communications that promote a strong GRC culture.
It's also fun; shaking things up is what working for GWI is all about. You'll need to be flexible, comfortable with continuous change, and working in a high-tempo environment.
What do I need to bring with me? 🧳
You'll need to be able to demonstrate the core skills this role requires. You don't have to tick all the boxes right away; the important thing is that you're willing to learn. Here's what the team will be looking for in you:
👉 In-depth, practical experience obtaining and maintaining ISO 27001 certification, with solid knowledge of frameworks such as NIST — typically 3–5 years in an information security compliance role, though other experience levels will be considered.
👉 Proven ability to develop and maintain security policies and procedures that align with industry best practice.
👉 Experience conducting vendor security assessments and managing client security onboarding requirements, balancing risk against commercial objectives.
👉 Hands-on experience building or maintaining a security trust portal; familiarity with tools such as Drata or Vanta is a plus.
👉 Knowledge of SaaS and AI environments, with experience implementing and managing cloud security best practices.
👉 Strong communication skills — able to translate complex GRC topics into clear internal guidance and keep the wider business informed and engaged on security matters.
Equally important is attitude. We want people who think big (to make an impact), ask why (to find a better way), and show respect (to everyone, at every level, all the time). Those are our values, and they're a big part of what we're looking for in you.
What We Offer 🧘
At GWI, you’ll find meaningful work, visible impact, and a culture that empowers you to do your best. Our package includes:
- Time to recharge – 25 days’ annual leave, plus office closures over the holidays.
- Health & wellbeing – Health cash plan, enhanced family benefits, carer days, and mental health support.
- Financial benefits – Competitive salary, 4% pension matching, and recognition programs that celebrate success.
Put all that together and GWI is the friendliest, most fulfilling place any of us has ever worked.
Diversity, Equity & Inclusion 🫶
Diversity is fundamental to who we are—both as a data company and as a workplace. Our data reflects global realities, and so must our teams. We strive to ensure our workforce is as diverse and inclusive as the insights we provide to our clients.
As a Disability Confident employer, we welcome applications from disabled candidates and are committed to providing all necessary adjustments during the hiring process. We also actively encourage applications from underrepresented and marginalized communities.
At GWI, you will find a place where you can contribute meaningfully, grow professionally, and belong fully.
#li-hybrid
#LI-VS01
This description is the source posting as it read when we added it. We are not affiliated with GWI, so check their own site for the current details.
Where this offer sits in the market
Cyber security professionals (SOC 2135) · UK · ONS ASHE 2025 · basic pay · ~30k in sample- Middle half £43,680–69,316
- Median £51,376
- Going rate £48,500
- Threshold £41,700
- New entrant £34,000–43,700
Similar sponsored roles
See all UK visa jobsNo close matches live right now.
Browse more sponsored jobs at GWIAbout sponsorship for this role
Does this job guarantee visa sponsorship?
Not necessarily. GWI holds a sponsor licence, but sponsorship for a specific hire is always the employer's decision. Be upfront in your application that you'll require it.
What salary is needed for this role to be eligible?
The offer must clear both the general threshold and the SOC 2135 going rate of £48,500. New-entrant and shortage discounts can lower it.