> Markdown version of [/jobs/ext/4016614-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/4016614-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst

- **Company:** Maru Search & Consultancy Ltd
- **Location:** Bournemouth, UK
- **Experience:** Expert
- **Salary:** £44,000 - £50,000
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Leak Prevention, Identity and Access Management, PCI Data Security Standards, Systems Development Life Cycle, Information Security Management System
- **Published:** October 30, 2026
- **Apply:** https://www.reed.co.uk/jobs/information-security-analyst/57505665

## About the Role

* A couple of years in information security, IT risk, governance or compliance
 * A solid understanding of ISO 27001 (essential)
 * Experience of risk assessments and security policies
 * Knowledge of data protection and regulatory requirements (FCA, ICO)
 * Clear communication, with the ability to explain technical points simply
 * CISSP, CISA or CRISC, or the drive to study for one (an ISACA qualification would be ideal)
 * Desirable: ISO 27001 implementer or auditor, ITIL Foundation, financial services or insurance experience, * CISSP
 * CISA
 * ISMS
 * PCI DSS
 * ISO 27001
 * Data Loss Prevention
 * Supplier Due Diligence
 * Access Management
 * Internal Audit
 * Risk Assessment

## Description

* Helping maintain and improve the ISMS so ISO 27001 certification is kept
 * Running internal audits against ISO 27001
 * Carrying out risk assessments on business processes, systems and projects
 * Helping mature Data Loss Prevention and Access Management
 * Working with project managers so security risks are picked up through the SDLC
 * Writing and maintaining security policies, standards and procedures
 * Carrying out security due diligence on third-party suppliers, including site visits
 * Supporting security awareness, audits and incident management