Information Security Analyst

Hyrbrid Working Offered

**Note Preference will be given to candidates from a financial services / banking environments**

Salary: Up to £65,000

Purpose of the Role

Supporting the organisation’s Information Security function by helping to develop, operate, and improve its Information Security Management System (ISMS). The role is responsible for providing advice, assurance, and oversight to reduce risks that could compromise the confidentiality, integrity, and availability of business systems and data. Experience in designing and monitoring security controls is essential, supporting compliance with industry standards and regulation, and ensuring alignment with group-wide information security practices.

Key Responsibilities

• Carry out assurance activities to measure compliance with security policies and control objectives, identifying gaps and opportunities for improvement within the first line of defence.
• Record, track, and report on findings from security reviews, audits, and incidents, including the preparation of management information and risk reporting.
• Develop, update, and deliver information security awareness training to ensure all employees understand their obligations and responsibilities.
• Respond to security-related queries arising from audits and group-level oversight.
• Contribute to vendor risk assessments with a focus on information security requirements.
• Draft and maintain guidance on security controls for both business and IT stakeholders.
• Monitor security alerts, logs, and related tools, escalating issues where required.
• Support the coordination of incident response activities and participate in simulation exercises.
• Perform information security duties as outlined in corporate policies and procedures.
• Stay current with emerging practices, threats, and technologies to maintain the knowledge required for the role.
• Provide support to senior information security leadership as required.
• Undertake other tasks related to information security or IT as directed.

Qualifications and Experience

• Experience in managing or supporting an Information Security Management System (ISMS) based on frameworks such as ISO 27001, NIST, or SOC2.
• Professional certification in information security governance and management (e.g., CISSP, CISM, CISA) preferred.
• Minimum of 2 years’ experience in information security, including carrying out reviews and supporting improvements across technical and procedural controls.
• Strong skills in documentation, analysis, and reporting.
• Technical knowledge of cybersecurity concepts and practices.
• (Desirable) Familiarity with SIEM, vulnerability assessment, incident detection, and system hardening.
• (Desirable) Exposure to tools such as Microsoft Sentinel, Darktrace, Carbon Black, or Qualys.
• General IT knowledge, with an understanding of IT operations and risks.
• Awareness of regulatory environments, ideally with some exposure to financial services or another highly regulated sector.