Information Security Risk Analyst

As an Information Security Risk Analyst you’ll play a key role in implementing and strengthening security risk management, helping the business make informed decisions while maintaining robust security standards in a changing regulatory and technology landscape.

You’ll assess security risks across systems, projects, technology changes, AI tools and third party suppliers, translating your findings into practical recommendations and actionable risk treatment plans. You’ll maintain the Information Security Risk Register, ensuring risks have clear ownership, appropriate controls and effective remediation through to closure.

You’ll evaluate security controls against recognised frameworks such as ISO 27001 and NIST CSF, identify gaps and support maturity assessments to benchmark the organisation’s security posture. Working closely with Security Operations and Engineering, you’ll analyse monthly key risk indicators (KRIs), using threat, vulnerability and incident data to identify trends, highlight systemic weaknesses and communicate business risk.

You’ll also contribute to security governance, preparing reports for risk forums and senior management, managing policy exceptions and risk acceptances and tracking decisions and actions. You’ll help maintain security policies, standards and procedures, monitor evolving regulatory requirements including FCA regulation, DORA and GDPR and support internal and external audits.

Are you an Information Security professional with experience in risk assessment, security governance and control assurance?, * You have experience in a similar Information Security Risk Analyst

• You have a strong understanding of security risk assessment, control frameworks and remediation
• You’re familiar with ISO 27001, NIST CSF and relevant regulatory requirements, ideally within financial services
• You have experience assessing third party security risk and maintaining risk registers
• You can interpret security metrics and translate technical findings into clear business risks and recommendations
• Your comfortable using AI in your daily activities
• You have strong communication skills, with confidence engaging technical teams, suppliers and senior stakeholders
• You have a proactive, analytical approach, with the ability to manage multiple risks and drive actions through to completion
• You are degree educated, having achieved a 2.1 or above from a top tier university, e.g. Russel Group / Oxbridge

• Salary to £90k
• Pension
• Private medical insurance including 24 hour GP access
• Enhanced parental leave policy
• 25 days annual leave
• Ongoing training and development and financial support for courses