Information Security Analyst

Antal International Network; United Kingdom; Hybrid; Confidential; Full time

Job summary

A notable consulting firm is seeking an experienced Senior Information Security Analyst in the UK. In this hybrid role, you will assess risks, review security documentation, and maintain compliance with critical standards like Cyber Essentials Plus and ISO 27001. This position requires strong judgement skills and the ability to communicate effectively across technical and non-technical teams.

Qualifications

• Experience in assessing risks and handling security documentation.
• Capability to respond to security questionnaires and support incident investigations.
• Ability to maintain compliance with security standards.

Responsibilities

• Assess risks related to information security.
• Review security documentation for suppliers and projects.
• Respond to security-related inquiries and tenders.
• Support incident investigations to uphold security standards.
• Communicate effectively with technical and non-technical stakeholders.

Skills

Risk assessment

Security documentation review

Incident response

Communication with stakeholders

Job description

Senior Information Security Analyst

My client, a fantastic NFP, is seeking an experienced Senior Information Security Analyst to provide immediate support to the Information Security team.

This role is a hybrid of technical security analysis and governance, risk, and compliance (GRC) activities. The successful candidate will play a key role in assessing risks, reviewing supplier and project security documentation, responding to security questionnaires and tenders, supporting incident investigations, and helping to maintain security posture and compliance with relevant standards (Cyber Essentials Plus, ISO 27001, DSPT, GDPR, NCSC). This is a hands‑on delivery role for someone who can work independently, make sound judgments, and communicate clearly with both technical and non-technical stakeholders.

• Assess risks
• Review supplier and project security documentation
• Respond to security questionnaires and tenders
• Support incident investigations
• Maintain security posture and compliance with Cyber Essentials Plus, ISO 27001, DSPT, GDPR, NCSC
• Communicate clearly with both technical and non-technical stakeholders