Information Security Analyst

Ventula Consulting; Southampton; Hybrid; GBP 45,000 - 50,000; Full time

Job summary

A global logistics organization based in Southampton is seeking a proactive GRC Analyst to lead cyber security and information security activities. This role involves ensuring compliance with government regulations and aligning security controls with business strategy. Key requirements include a strong GRC background, good communication skills, and experience implementing information security frameworks like NIST CSF and ISO/IEC 27001. This full-time position offers a salary range of £45,000-50,000.

Qualifications

• Proactive mindset with a drive to deliver results.
• Strong understanding of information security frameworks.
• Ability to define and document compliance activities.

Responsibilities

• Lead day-to-day cyber security and information security activities.
• Ensure compliance with government regulations.
• Maintain and improve procedures for implementing security frameworks.

Skills

Strong GRC background

Good communication skills

Stakeholder management experience

Experience in implementing frameworks

Job description

This range is provided by Ventula Consulting. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

Direct message the job poster from Ventula Consulting

GRC Analyst – Southampton (occasional travel to site) - £45,000-50,000

We are seeking a proactive GRC Analyst to join a globally recognised supply chain and logistics organisation. This role plays a key part in protecting the business by leading day‑to‑day cyber security and information security activities, ensuring compliance with government regulations and aligning security controls with technical and business strategy, as well as industry best practice.

This is an exciting opportunity to join our client as they introduce new frameworks and continue to enhance their information security posture, including NIST CSF, NIS Regulations, and ISO/IEC 27001. The GRC Analyst will be responsible for maintaining and improving procedures, taking a hands‑on approach, and supporting the end‑to‑end implementation of new frameworks.

The successful candidate will be able to define and document compliance activities required to meet service objectives, demonstrate a strong understanding of information security frameworks, and work independently. A proactive mindset, strong drive to deliver results, and practical experience implementing frameworks from the ground up are essential.

Key Requirements:

• Strong GRC background
• Strong understanding of information security frameworks, including at least one of the following: NIST CSF, NIS CAF, ISO/IEC 27001
• Good communication skills and stakeholder management experience
• Experience in implementing frameworks from the ground up

Location

Southampton (occasional travel to site)

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Information Technology

Industries

Transportation, Logistics, Supply Chain and Storage and Information Services