Information Security Analyst

JR United Kingdom; Hemel Hempstead; Remote; GBP 40,000 - 58,000; Full time

Job summary

A leading UK enterprise technology firm is seeking an Information Security Assurance Analyst. The role involves enhancing compliance efforts, managing documentation for control evaluations, and supporting audit preparations. Ideal candidates will be integral to the continuous improvement of security processes within a rapidly expanding team.

Benefits

Enterprise Benefits (Life Insurance, Medical, Pension)

Qualifications

• Knowledge of DORA, PCDSS, SARBOX is beneficial but not essential.

Responsibilities

• Coordinate control assessments with stakeholders.
• Evaluate effectiveness of security controls.
• Maintain documentation of assessments.

Skills

Compliance

Documentation Management

Risk Analysis

Communication

Job description

Social network you want to login/join with:

Information Security Analyst, hemel hempstead

Client: Cloud Decisions

Location: hemel hempstead, United Kingdom

Job Category: Other

-

EU work permit required: Yes

Job Views: 5

Posted: 31.05.2025

Expiry Date: 15.07.2025

Job Description:

Upto £57,500 + Enterprise Benefits (Life Ins/Medical/Pension)

Fully Remote (UK only)

***Please Note: NOT A CYBER SEC TECHNICAL ROLE***

Be part of their high growth Information Security plans as they build the team to x4

Cloud Decisions have partnered with one of the UK’s most exciting enterprise technology transformations: a £multi-billion, employee-owned group, one of the top 10 largest employee-owned businesses in the UK, and one of the largest global players in insurance across 100+ countries.

Following a wave of acquisitions and continued digital modernisation and compliance, they’re hiring an Information Security Assurance Analyst who understands Controls & Compliance with security regulations and standards, and can work in a small, high-trust team. The role involves building InfoSec capability to ensure regulatory compliance, information security maturity, and readiness for audits, tenders, or risk reviews.

Control/Compliance Assessment Duties:

• Schedule and Coordinate Assessments: Coordinate control assessments with control owners, asset custodians, and third parties.
• Evaluate Controls: Assess the design and effectiveness of security controls against policies, standards, and procedures.
• Documentation Maintenance: Keep documentation of assessments and remediation activities up to date.
• Organise Control Evidence: Ensure all control evidence is well-organised and accessible.
• Notify Deviations: Notify relevant parties of process deviations.
• Risk Analysis Reports: Produce reports on the impact of control gaps on risks.
• Communicate Findings: Share issues with security leadership clearly.
• Dashboard and Reporting Input: Update dashboards and databases with current details.
• System Security Plans (SSPs): Support documentation of security requirements for information systems, including controls testing and ongoing monitoring.

Compliance/Control Improvement Duties:

• Update Processes: Coordinate updates to business processes.
• Enhance Procedures: Assist in documenting and designing procedures and tests.
• Propose Enhancements: Recommend improvements to controls and procedures.
• Reporting Support: Assist in reporting on assessment activities.

Audit/Assessment Duties:

• Third-Party Due Diligence: Manage due diligence requests, ensure timely responses, and document deficiencies.
• Audit Preparation and Support: Prepare evidence and respond to audit requests.

InfoSec Effectiveness - Collaboration/Continuous Improvement:

• Continuous Improvement: Identify and implement process improvements.
• Training and Development: Assist in training team members and stakeholders.
• Vendor Management: Ensure vendors have robust BCDR plans and conduct assessments.

Knowledge of DORA, PCDSS, SARBOX is beneficial but not essential.