> Markdown version of [/jobs/ext/1909497-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/1909497-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst

- **Company:** REX Cyber Security
- **Location:** Bristol, UK
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Microsoft Azure, Cloud Computing, Cyber Security, Information Security Management System, Cybercrime
- **Published:** August 4, 2026
- **Apply:** https://www.apply4u.co.uk/jobs/x/42816795/

## About the Role

We're looking for someone with previous experience in an Information Security, GRC, Security Assurance or ISMS-focused role, ideally within a complex or regulated organisation.You'll ideally bring:
Strong practical knowledge of ISO 27001, ideally including ISO 27001#####2Experience conducting or supporting ISO management system auditsKnowledge of security standards and frameworks such as Cyber Essentials Plus, ISO 22301 and NISTExperience with security risk assessments, control assurance and remediationUnderstanding of third-party and supplier security riskGood broader knowledge of cyber security and technologyFamiliarity with Azure, Microsoft 365 and cloud securityStrong documentation, analytical and problem-solving skillsConfidence working with and influencing stakeholders across technical and non-technical teamsThe ability to communicate security risks and requirements clearly to stakeholders at all levels
Relevant certifications such as CISSP, CISMP, ISO 27001 Lead Implementer or Lead Auditor would be highly beneficial.

## Description

You'll take a hands-on role across information security governance, audit and compliance, helping ensure security controls remain effective, proportionate and aligned with recognised standards.Key responsibilities will include:
Maintaining and continually improving the organisation's Information Security Management System (ISMS), including policies, processes, procedures and guidelinesSupporting continued compliance with ISO 27001:##### and other applicable security standardsPlanning, conducting and reporting on internal security audits, identifying areas for improvement and supporting remediationHelping expand the scope of ISO 27001 certification across international entities, including controls, risk assessments and audit readinessConducting security risk assessments across systems, departments and business processes, and documenting appropriate treatment plansSupporting external audits, certification activities and management reviewsSupporting security incidents where they relate to control effectiveness, policy compliance and corrective actionsResponding to client security questionnaires, assurance requests and contractual security requirementsConducting supplier security due diligence, ongoing monitoring and
supplier auditsPreparing reports on information security risks, controls, incidents and remediation for senior stakeholdersSupporting security awareness programmes and training to strengthen security culture across the businessKeeping up to date with evolving cyber threats, regulatory requirements and security technologies


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)

## Related Articles

- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)