Information Security Analyst

Principality Building Society; Wales; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A financial services company is seeking an Analytical Information Security Analyst to support and enhance their Information Security Management System. The successful candidate will coordinate ISMS activities, assess risks, and improve security protocols. Strong background in information security and problem-solving abilities required. Offers a flexible/hybrid working environment in Cardiff, with a focus on employee wellbeing and growth opportunities.

Benefits

Flexible benefits

Wellbeing benefits

Refurbished office in Cardiff

Qualifications

• Proven grounding in Information Security or IT Infrastructure concepts.
• Desirable experience in a regulated industry, ideally Financial Services.
• Ability to assess threats and manage vulnerabilities.

Responsibilities

• Coordinate activities within the Information Security Management System (ISMS).
• Support the review and improvement of policies and procedures.
• Assist with risk and control assessments.

Skills

Knowledge of asset and network security

Access management

Secure Software Development Lifecycle

Understanding of IS standards (ISO27001, NIST)

Awareness of emerging threats and technologies

Strong written skills

Positive, solutions-focused mindset

Strong time management

Job description

Overview

We’re offering an exciting opportunity for an analytical, inquisitive, technical minded person to join our team as an Information Security Analyst. In this role, you'll provide support, guidance, and coordination of information security initiatives—assisting in ensuring our systems, data remain secure, compliant, and resilient. You'll help maintain and improve our Information Security Management System (ISMS), working with internal and external stakeholders.

Responsibilities

• Coordinating activities within the Information Security Management System (ISMS)
• Supporting the review and improvement of policies, standards, and procedures
• Assisting with risk and control assessments
• Coordinating security governance MI, documentation, and records
• Liaising with security vendors and outsourced service providers
• Conducting third-party security due diligence and ongoing monitoring
• Responding to internal colleague queries and providing guidance
• Supporting ongoing security improvement programmes

Qualifications / Experience

• Knowledge of asset and network security, access management, Secure Software Development Lifecycle (SSDLC), and security operations testing
• Understanding of information security standards, e.g., ISO27001, NIST
• Awareness of emerging threats, technologies, and industry developments
• Familiarity with Microsoft operating environments
• Working knowledge of Information Security Management Systems (ISMS)
• Ability to assess threats, manage vulnerabilities, and support security risk management
• Strong written skills for drafting policies and procedures
• Positive, solutions-focused mindset with excellent problem-solving abilities
• High level of discretion and confidentiality
• Strong time management and ability to prioritise effectively

Experience

• Proven grounding/ knowledge of Information Security or IT Infrastructure, concepts, and frameworks
• Desirable experience in a regulated industry, ideally Financial Services
• Exposure to first- or second-line risk functions
• Desirable experience conducting risk assessments or thematic reviews

Belonging and Benefits

BELONG. There\'s no place like Principality. Our home is your home. When you join the team, we commit to a warm welcome, friendly environment, flexible benefits, and a focus on wellbeing. We offer a flexible/hybrid working policy, a recognition as a 2022 UK Best Large Workplace for Women, a refurbished hi-tech office in the centre of Cardiff, wellbeing benefits designed to put our people first, and ongoing opportunities to grow together.