Information Security Analyst

Vitality; Greater London, Stockport; Hybrid; GBP 42,000 - 64,000; Full time

Benefits offered by this job

Bonus schemes

Pension up to 12%

Vitality health insurance

Life Assurance

Job summary

Vitality is seeking an Information Security Analyst to safeguard member data and support our information security program. You will advise across the business, help maintain ISO 27001, and perform risk assessments across processes and systems.

You will contribute to security training, policy development, and due diligence on third-party suppliers while supporting the software development lifecycle security and monitoring capabilities.

Qualifications

• Experience in an information security role.
• Strong knowledge of data protection and regulatory compliance.
• Experience performing risk assessments and business impact analyses.
• Familiarity with ISO 27001 and PCI DSS requirements.
• Experience developing information security policies and procedures.
• Ability to conduct internal audits and produce audit reports.
• Experience supporting projects through the software development lifecycle.
• Understanding of DLP and RBAC controls.
• Professional qualification or commitment to obtain one.

Responsibilities

• Provide clear information security advice to stakeholders across the business.
• Support the Information Security Management System to maintain ISO 27001 certification.
• Complete information security risk assessments across processes, systems and projects.
• Conduct internal audits and produce audit reports with evidence.
• Work with project managers to address security risks in the SDLC.
• Develop and maintain security policies, standards and procedures.
• Support data loss prevention and access-control monitoring capabilities.
• Perform security due diligence on third-party suppliers, including site visits.

Skills

Security risk assessment

Regulatory compliance

Stakeholder communication

Education

CISSP / CISA / CRISC

Tools

ISO 27001

PCI DSS

Job description

About The Role

Team – Information Security

Working Pattern

Hybrid – 2 days per week in the Vitality Bournemouth, London or Stockport Office. Full-time hours apply.

We are happy to discuss flexible working!

Top 3 skills needed for this role:

• Proven security risk assessment
• Strong regulatory compliance knowledge
• Skilled stakeholder communication

What this role is all about

Help us keep Vitality secure, resilient and ready for what’s next. As an Information Security Analyst, you’ll play an important role in protecting our business and member data, identifying security risks and strengthening the controls that keep us secure. Working across teams and projects, you’ll provide practical security advice, support our Information Security Management System and help Vitality stay aligned with recognised security standards and regulatory requirements.

What you will be doing

• Provide clear and practical information security advice to stakeholders across the business
• Support the development and continuous improvement of the Information Security Management System to maintain ISO 27001 certification
• Complete information security risk assessments across business processes, systems and projects, identifying appropriate mitigating controls
• Conduct internal audits against ISO 27001 requirements and produce clear, evidence-based audit reports
• Work with project managers to identify and address information security risks throughout the software development lifecycle
• Develop, implement and maintain information security policies, standards, procedures and processes
• Support the maturity of Data Loss Prevention, access management and security monitoring capabilities
• Complete security due diligence on third-party suppliers, including site visits where required
• Contribute to information security training, awareness activities and wider improvements to Vitality’s security posture
• Support the investigation and management of information security incidents and associated audit activity

What do you need to thrive?

• Experience working within an information security role
• Strong understanding of information security principles, data protection and regulatory compliance
• Experience completing risk assessments and business impact analyses
• Working knowledge of ISO 27001, ISO 27002, PCI DSS and other relevant security frameworks
• Experience developing and implementing information security policies and procedures
• Ability to conduct internal audits and produce clear audit reports
• Experience supporting projects throughout the software development lifecycle
• Understanding of information security monitoring tools and technical controls, including Data Loss Prevention and role-based access controls
• A professional qualification such as CISSP, CISA or CRISC, or the commitment to work towards one

So, what’s in it for you?

• Bonus Schemes – A bonus that regularly rewards you for your performance
• A pension of up to 12%– We will match your contributions up to 6% of your salary
• Our award-winning Vitality health insurance – With its own set of rewards and benefits
• Life Assurance – Four times annual salary

If you are successful… we’ll:

• Help you to be the healthiest you’ve ever been
• Create an environment that embraces you as you are and enables you to be your best self
• Give you flexibility on how, where and when you work
• Help you advance your career by playing you to your strengths
• Give you a voice to help our business grow and make Vitality a great place to be
• Give you the space to try, fail and learn
• Provide a healthy balance of challenge and support
• Recognise and reward you with a competitive salary and amazing benefits
• Be there for you when you need us
• Provide opportunities for you to be a force for good in society

We commit to all these things because we want you to feel that you belong, and are supported to be happy and healthy.

About Us

We’re incredibly proud to be recognised for the culture we've created — recently being named one of Glassdoor’s Best Places to Work 2026, and in 2024 we were delighted to be awarded Top 10 Places to Work in the Sunday Times Awards.

Vitality is a multi-award-winning UK insurance brand, here to make the world a healthier, happier place.

We’ve been a purpose and values-driven business from day 1- long before it became fashionable. Our core purpose is to make people healthier and enhance protect their lives. Vitality pioneered shared-value insurance. We incentivise people to live healthier longer lives – they benefit, our business benefits, and society benefits. We’re successful because we attract, develop, and retain the best people – and because we care.

Plus, you get to join our 1.7+ million members with access to our unique health insurance and healthy living programme. Just to make sure you know our products inside and out.

Ready to find out if we’re the right fit for you? We can’t wait.

Diversity & Inclusion

At Vitality, we’re committed to diversity and inclusion because it’s good for our employees, for our business, and for society. We welcome applications from individuals of all backgrounds, experiences, and perspectives.

Vitality’s approach to sustainability

Vitality is a business that drives positive change. We reward people for making and sustaining healthier choices. But healthy people also need a healthy environment. To learn more please visit our Careers page.