Information Security Analyst

G MASS; Greater London; Hybrid; GBP 110,000 - 140,000; Full time

Job summary

G MASS is seeking to deploy one of our own Information Security Analysts into a specialist Lloyd’s / London Market insurance engagement on a fixed-term contract running to the end of November 2026.

The consultant will be embedded within the client’s Information Security function, providing hands-on support across third-party risk management, day-to-day security operations, incident support, and compliance and assurance activity.

Qualifications

• Experience in information security within financial services or regulated sectors.
• Knowledge of third-party risk management and supplier due diligence.
• Familiarity with ISO 27001 and NIST CSF and UK regulatory expectations.

Responsibilities

• Complete supplier security due diligence, risk assessments and periodic reviews with documentation of findings and remediation.
• Triage security requests, conduct threat intelligence and provide risk-based advice to the business.
• Assist with incident response and post-incident follow-up per established processes.
• Gather evidence, support audits and regulatory requests, and track remediation actions across frameworks.

Skills

Information Security

Risk Assessments

Security Operations

Incident Response

Documentation

Regulatory Awareness

ISO 27001

NIST CSF

FCA/PRA familiarity

Third-party risk

Tools

ISO 27001

NIST CSF

Job description

G MASS is seeking to deploy one of our own Information Security Analysts into a specialist Lloyd’s / London Market insurance engagement, on a fixed-term contract (FTC) running to the end of November 2026. The consultant will be embedded within the client’s Information Security function, providing hands‑on support across third‑party risk management, day‑to‑day security operations, incident support, and compliance and assurance activity. This is a client‑facing, delivery‑focused role suited to a consultant comfortable operating independently within a regulated financial services environment.

Key Responsibilities:

• Complete and progress supplier security due diligence, risk assessments and periodic reviews, clearly documenting findings, required remediation, and escalation points.
• Support Triage, conduct threat intelligence, and respond to day‑to‑day Information Security requests from the business, providing clear, risk‑based advice and escalating material matters promptly.
• Support the assessment, coordination, documentation and follow‑up of Information Security incidents and enquiries in accordance with established processes.
• Assist with evidence gathering, control validation, audit and regulatory requests, and remediation tracking against relevant obligations and frameworks, including ISO 27001, NIST CSF, NYDFS, FCA, and PRA where applicable.
• Assessments Conduct structured risk and control assessments across third parties, business activities, and projects, ensuring identified risks and actions are accurately recorded and tracked.
• Proven experience in an Information Security, Cyber Risk, or IT Risk role within financial services, insurance, or another regulated sector
• Practical experience of third‑party / supplier security risk assessment and due diligence processes
• Working knowledge of ISO 27001, NIST CSF, and awareness of NYDFS Cybersecurity Regulation
• Familiarity with UK regulatory expectations relevant to information security, including FCA and PRA requirements
• Experience supporting security incident response, including documentation and post‑incident follow‑up
• Confident engaging directly with business stakeholders, translating technical risk into clear, actionable advice
• Strong documentation and record‑keeping discipline, comfortable maintaining risk registers and audit evidence
• Relevant certification desirable (e.g. CISSP, CISM, ISO 27001 Lead Auditor/Implementer, or equivalent)
• Able to work independently as a deployed consultant within a client’s existing Information Security team and governance structure

Length: Initial 2 month contract

About the Engagement

This role is a G MASS-managed consultant deployment: the successful candidate will remain a G MASS employee, working on‑site or hybrid with our client under a fixed‑term or ongoing statement of work. G MASS provides specialist Lloyd’s and London Market resourcing and technology advisory, placing experienced consultants into insurance sector engagements across governance, risk, and technology functions.