Information Security Analyst

JR United Kingdom; Chesterfield; Remote; GBP 58,000; Full time

Job summary

A leading company in enterprise technology is seeking an experienced Information Security Assurance Analyst. This role, fully remote within the UK, focuses on ensuring compliance and enhancing information security processes. You will work autonomously in a high-trust team, coordinating assessments and supporting audit activities.

Benefits

Enterprise Benefits (Life Insurance, Medical, Pension)

Qualifications

• Knowledge of DORA, PCDSS, SARBOX is beneficial but not essential.

Responsibilities

• Schedule and coordinate control assessments with various stakeholders.
• Evaluate the effectiveness of security controls against regulatory standards.
• Prepare audit evidence and manage third-party assessments.

Skills

Controls & Compliance

Risk Analysis

Documentation Maintenance

Organizational Skills

Job description

Social network you want to login/join with:

Information Security Analyst, chesterfield

Client: Cloud Decisions

Location: chesterfield, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 5

Posted: 31.05.2025

Expiry Date: 15.07.2025

Job Description:

Upto £57,500 + Enterprise Benefits (Life Ins/Medical/Pension)

Fully Remote (UK only)

***Please Note: NOT A CYBER SEC TECHNICAL ROLE***

Be part of their high growth Information Security plans as they build the team to x4

Cloud Decisions has partnered with one of the UK’s most exciting enterprise technology transformations: a £multi-billion, employee-owned group, one of the top 10 largest employee-owned businesses in the UK, and a major player in insurance across 100+ countries.

Following a wave of acquisitions and ongoing digital modernization and compliance efforts, they’re hiring an Information Security Assurance Analyst who understands Controls & Compliance with security regulations and standards. The role involves working in a small, high-trust team, working autonomously to build InfoSec capability, ensuring regulatory compliance, information security maturity, and readiness for audits, tenders, or risk reviews.

Control/Compliance Assessment Duties:

• Schedule and Coordinate Assessments: Organize control assessments with control owners, asset custodians, and third parties.
• Evaluate Controls: Assess the design and effectiveness of security controls against policies, standards, and procedures.
• Documentation Maintenance: Keep documentation of assessments and remediation activities up to date.
• Organize Control Evidence: Ensure control evidence is accessible and well-organized.
• Notify Deviations: Notify relevant parties of deviations in business processes and procedures.
• Risk Analysis Reports: Write reports on the impact of control gaps on risks.
• Communicate Findings: Share issues with Security leadership clearly and effectively.
• Dashboard and Reporting: Provide data for dashboards and reports.
• System Security Plans (SSPs): Support documentation of security requirements for systems, including controls testing and ongoing monitoring.

Compliance/Control Improvement Duties:

• Update Processes: Lead updates to business processes with gaps or issues.
• Enhance Procedures: Help document and improve procedures, including effectiveness testing.
• Propose Enhancements: Recommend improvements to controls and procedures.
• Reporting Support: Assist with regular reporting on assessment activities.

Audit/Assessment Duties:

• Third-Party Due Diligence: Manage third-party assessments, ensuring timely responses and documenting deficiencies.
• Audit Support: Prepare evidence and respond to audit requests and findings.

InfoSec Effectiveness & Continuous Improvement:

• Continuous Improvement: Identify and implement process improvements.
• Training & Development: Assist in training team members and stakeholders.
• Vendor Management: Assess vendor BCDR plans and capabilities regularly.

Knowledge of DORA, PCDSS, SARBOX is beneficial but not essential.