Information Security Analyst

Job Description

Information Security Analyst needed by a London professional services firm to support governance, risk and compliance activity and deliver the firm’s security awareness programme.

You’ll be part of an established security team, keeping the firm’s security framework in good shape and making sure it stands up to certification and audit. Alongside that, you’ll help shape how colleagues learn about security, from the content they see to the phishing tests they’re sent. It’s a good fit for someone who enjoys both the structure of GRC work and the people side of changing behaviour.

Day to day, you’ll be:

• Helping run and improve the information security management system, including policies and procedures
• Supporting ISO 27001 work, from pulling evidence together to tracking fixes after audits
• Carrying out risk assessments and internal control reviews
• Vetting new suppliers and software, and reviewing existing third parties
• Creating awareness material with the training team and running sessions across the firm
• Organising phishing exercises and using the results to sharpen future training

Ideally you’ll have:

• Experience in an information security, GRC, risk or compliance role, including work on an ISMS
• A solid grasp of security governance, risk and control assurance
• Clear writing skills, with experience producing policies or guidance for non-technical readers
• Some involvement in security awareness or training campaigns
• Exposure to third-party due diligence or client security questionnaires
• Professional services experience, particularly accounting, audit or legal, would be a bonus

Hybrid working is available.

Apply now to find out more.