Hybrid Information Security Risk & Assurance Analyst

United Trust Bank Limited; Greater London; Hybrid; GBP 65,000 - 95,000; Full time

Job summary

United Trust Bank Limited is seeking an experienced Information Security Governance professional to lead risk, assurance and audit activities. The role ensures security risks and controls are documented, assessed, tested and evidenced in line with PRA/FCA expectations.

You will coordinate information security audits, maintain Cyber Essentials Plus and SWIFT CSP attestations, and oversee PCI DSS obligations while maintaining alignment with ISO 27001 and NIST CSF.

Qualifications

• Experience in information security risk, assurance, audit, compliance or security-operations within financial services or regulated environments.
• Working knowledge of SWIFT CSP, Cyber Essentials Plus, PCI DSS, ISO 27001 and NIST CSF; depth in remaining areas encouraged.
• Certifications such as ISO 27001 Lead Implementer/Auditor, CISA, CRISC, CISSP or Security+ are beneficial; practical experience valued.

Responsibilities

• Maintain the information security risk register with risks, treatments and exceptions.
• Conduct information security risk assessments on systems, projects, changes and suppliers.
• Maintain the information security control framework, policies and evidence.
• Plan and coordinate annual information security audits and certifications; manage evidence and responses.
• Own SWIFT CSP attestation cycle and track framework changes between releases.
• Coordinate independent assessments and manage assessor relationships in KYC-SA portals.
• Deliver Cyber Essentials Plus renewal including testing and remediation to avoid lapses.
• Monitor scheme changes and assure ongoing compliance across devices, software and access controls.
• Prepare governance packs, MIS, and supporting papers for security governance.
• Support governance of AI, LLMs, agents, and automation in the Bank.
• Perform risk-based security due diligence on suppliers and outsourced services.

Skills

InfoSec risk management

Audit & assurance

Regulatory compliance

Vendor risk & due diligence

Risk assessments & reporting

Strong written communication

Education

Relevant information security certification (e.g., CISSP, CISA, CRISC)

Tools

SWIFT CSP

Cyber Essentials Plus

PCI DSS

ISO 27001

NIST CSF

Job description

United Trust Bank Limited is seeking an experienced Information Security Governance professional to lead risk, assurance and audit activities. The role ensures security risks and controls are documented, assessed, tested and evidenced in line with PRA/FCA expectations.

You will coordinate information security audits, maintain Cyber Essentials Plus and SWIFT CSP attestations, and oversee PCI DSS obligations while maintaining alignment with ISO 27001 and NIST CSF.