Information Security Analyst

Zinc; London Borough of Hackney; On-site; GBP 45,000 - 53,000; Full time

Benefits offered by this job

24 days holiday

Birthday off

Annual company retreat

Work from anywhere 30 days

Job summary

Zinc in London is seeking an Information Security Analyst to drive the security roadmap and partner with engineering to strengthen security across products and platforms.

You will own hands-on security work, implement controls, and help the team build a stronger, more resilient security posture as Zinc grows.

Qualifications

• Hands-on experience with Google Workspace administration and security.
• Experience with AWS environments and cloud security.
• Familiarity with device management and endpoint security tools (MDM/EDR).
• Experience identifying threats, assessing vulnerabilities and guiding mitigations.

Responsibilities

• Lead security roadmap initiatives across Zinc’s platform and products.
• Address audit findings and enforce security controls and compliance deadlines.
• Collaborate with engineering and other teams to improve security across the business.
• Perform hands-on security work, deploying new controls and monitoring systems.
• Design and mature IAM controls including MFA, JML processes and RBAC.

Skills

Google Workspace

AWS

MDM

EDR

Threat intel & VM

Job description

Information Security Analyst

Department: Legal & Compliance

Employment Type: Full Time

Location: Zinc - London

Reporting To: Peter Cave

Compensation: £45,000 - £53,000 / year

Description

This is an exciting opportunity to join Zinc's Information Security team at a pivotal point in its journey. As an Information Security Analyst, you'll play a key role in shaping and strengthening how we approach security across the business, taking ownership of meaningful projects that will have a real impact on our people, products and technology. You'll have the opportunity to drive improvements, introduce new security practices and work closely with teams across the business to make security a shared priority. It's a hands-on role where you'll have plenty of scope to use your technical expertise, influence how things are done and help build a stronger, more resilient security environment as Zinc continues to grow.

Key Responsibilities

You’ll have the opportunity to make a real impact on how Zinc approaches security. Some of your key responsibilities will include:

• Driving the Security Roadmap – take the lead on delivering our 2-year security roadmap, covering everything from workplace identity and cyber attack protection to workforce security, ecosystem resilience and secure software development.
• Strengthening Our Security Standards – tackle outstanding audit findings and recommendations, putting the right improvements in place and helping us stay on top of compliance deadlines.
• Bringing Teams Along on the Journey – work closely with engineering and other teams across the business to drive security improvements, influence decisions and get everyone moving in the same direction.
• Getting Hands-On – roll up your sleeves and get stuck into the technical work, from implementing new systems to rolling out important security controls.
• Building Stronger Identity & Access Management – design, implement or mature IAM controls, including Multi-Factor Authentication (MFA), Joiner-Mover-Leaver (JML) processes and Role-Based Access Control (RBAC).

Skills, Knowledge and Expertise

You need hands‑on experience with the following, as these are tools and technologies you'll be working with regularly in the role:

• Google Workspace – practical experience managing and securing Google Workspace environments.
• AWS – experience working with AWS environments and their security.
• MDM – understanding of device management and endpoint security.
• EDR – experience using EDR tools to monitor, detect and respond to threats.
• Threat Intelligence & Vulnerability Management – experience identifying potential threats, assessing vulnerabilities and helping to strengthen security across systems.

These are essential requirements rather than nice‑to‑haves, as you'll be working directly with these tools and technologies as part of your day‑to‑day responsibilities.

Nice-to-Have Experience

It would be a bonus if you also have experience with:

• OWASP SAMM / Secure SDLC maturity models – familiarity with application security frameworks and improving security practices throughout the software development lifecycle.
• PIM / PAM Implementation – experience implementing Privileged Identity Management (PIM) or Privileged Access Management (PAM) solutions.
• Industry Certifications – qualifications such as CISSP, CISM or CRISC.

These aren't essential, but they'd be a great addition to your experience and help you bring even more to the role!

We're looking for someone who can combine strong technical knowledge with the ability to bring people along with them. The following skills are essential to succeed in this role:

• Cross‑functional Leadership – ability to work collaboratively across different teams and drive security initiatives throughout the business.
• Influencing Without Authority – confidence in influencing and gaining buy‑in from teams, particularly engineering, even when they don't report directly to you.
• Prioritisation Under Pressure – ability to manage competing priorities, balance longer‑term security projects with urgent demands and keep things moving.
• Clear Communication – able to explain technical concepts and security risks in a clear, accessible way to both technical and non‑technical stakeholders.
• Pragmatism – able to balance the ideal security approach with practical business needs, finding solutions that strengthen security without slowing down delivery.

What we offer

• 24 days holiday + Bank Holidays + your birthday off
• £1200 annual benefits allowance (ThanksBen, from month 2)
• Early finish Fridays (16:00)
• Yearly company retreat abroad
• 30 days to Work from anywhere
• Enhanced Maternity, Paternity, and Adoption Leave (13 weeks full pay, 17 weeks half pay, then SMP for maternity, 1 month full pay for paternity/adoption)
• Statutory pension with NEST (3% employer, 5% employee)
• Zinc shares, issued through the EMI Scheme
• Unlimited access to Spill Therapy
• Company socials, quarterly team socials Free Monday lunches
• Nursery workplace benefit scheme (Yellownest)
• Option to lease an electric car through Electric Car Scheme
• Celebrated Zinc anniversaries