> Markdown version of [/jobs/ext/1232913-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/1232913-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst

- **Company:** RSM UK Group LLP.
- **Location:** London, UK
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Security Management System
- **Published:** July 11, 2026
- **Apply:** https://uk.indeed.com/viewjob?jk=f8b5168e99c16dcd

## About the Role

* Demonstrable relevant experience and awareness of information security obtained from a previous information security role including the supporting and administering of an ISMS
 * Experience of conducting supplier information security reviews
 * Great organisational skills
 * Self-motivated regarding own development and development of others within the organisation
 * Excellent clear and concise communication and interpersonal skills, orally, electronically and written, with the ability to use tact and persuasive skills
 * Strong analytical / investigative skills

## Description

We are looking for an Information Security GRC (Governance, Risk, and Compliance) Analyst to join our National Technology team at RSM UK. This role can be based in our London, Gatwick or Stoke office and will be responsible for developing, implementing, and maintaining a robust information security governance, risk management, and compliance program. This role involves assessing and managing risks, ensuring compliance with relevant regulations and standards, and promoting a culture of security awareness across the organization.

You'll make an impact by:

 * Assisting with the day-to-day management and maintenance of the Information Security Management System including the development and maintenance the current information security policies, standards, and procedures
 * Conducting risk assessments and identifying potential security threats and vulnerabilities, including risk assessments for projects and new initiatives
 * Assisting with the completion of questionnaires for new and existing clients
 * Conducting supplier assurance activities including conducting visits to existing and new suppliers, conducting due diligence, reviewing new software and services, and assessing existing suppliers
 * Monitoring and ensuring compliance with relevant regulations, standards, and frameworks (e.g., ISO 27001, Cyber Essentials Plus)
 * Collaborating with various departments to ensure security controls are implemented and maintained
 * Conducting regular internal information security audits and assessments to evaluate the effectiveness of security controls


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Communicate efficiently with Software Architecture Diagrams](https://www.wearedevelopers.com/videos/379-communicate-efficiently-with-software-architecture-diagrams)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)

## Related Articles

- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [Data Analyst Salary in Switzerland](https://www.wearedevelopers.com/magazine/276-data-analyst-salary-in-switzerland)