> Markdown version of [/jobs/ext/3980946-bi-and-data-warehouse-analyst](https://www.wearedevelopers.com/jobs/ext/3980946-bi-and-data-warehouse-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # BI and Data Warehouse Analyst - **Company:** Morgan Law - **Location:** London, UK - **Salary:** £100,000.0 - £110,000.0 - **Contract:** Permanent contract - **Skills:** Systems Engineering, Cyber Security, Data Warehousing, Oracle (Applications), HR Software - **Published:** October 28, 2026 - **Apply:** https://www.morgan-law.com/job/head-of-information-security-and-privacy-21418/#apply ## About the Role * Information Security Manager or equivalent with relevant industry experience. * Experience of managing and overseeing ISO 27001 audits, Cyber Essentials and Cyber Essentials Plus. * Develop and lead information and cyber security strategies, roadmaps and maturity plans. * Provide technical security guidance and assurance to technical and non-technical stakeholders. * Design and deliver security awareness programmes that improve understanding and influence behaviour. * Support business continuity and resilience planning, testing and lessons learned. * Engage senior stakeholders and committees through clear reporting, influence and constructive challenge. ## Description You will be responsible for the implementation and management of the Information management system, including third-party risk, ensuring its effectiveness is regularly assessed through external and internal audits., * Responsible for the development and management of information and cyber security frameworks and overseeing the management of the Information and Records Management. * Develop and promote policies to ensure compliance with regulations, standards and good practice relating to information security management. * Responsible for research and awareness of emerging security risks, ensuring solutions, services, policies, procedures and information security education programme are updated in reasonable timeframes to mitigate against new risks. * Responsible for making sure that the organisation is compliant with Information Security Standards (e.g. ISO 27001), ensuring all governance and audit requirements are undertaken. * Ensure that the organisation is appropriately protected in line with business needs against information and cyber risks including third-party and suppliers.