Information Security Analyst

JR United Kingdom; Wolverhampton; Remote; GBP 48,000 - 58,000; Full time

Job summary

A leading UK-based enterprise group is looking for a compliance-focused professional to join its Information Security team. The role emphasizes conducting assessments, ensuring regulatory compliance, and improving security controls within a fully remote setting. Candidates should be experienced in controls and compliance, capable of working autonomously in a high-trust environment.

Benefits

Life Insurance

Medical Benefits

Pension Plan

Qualifications

• Experience in controls and compliance within security regulations.
• Ability to work autonomously in a high-trust environment.
• Knowledge of DORA, PCDSS, SARBOX is advantageous.

Responsibilities

• Conduct assessments and evaluate the effectiveness of security controls.
• Organize documentation and report findings.
• Manage audit preparations and respond to requests.

Skills

Control Assessment

Compliance

Audit Readiness

Process Improvement

Job description

Salary: Up to £57,500 + Enterprise Benefits (Life Insurance, Medical, Pension)

Location: Fully Remote (UK only)

Note: NOT A CYBER SECURITY TECHNICAL ROLE

Cloud Decisions is expanding its high-growth Information Security team within a leading UK-based enterprise group. This role is ideal for candidates experienced in controls and compliance with security regulations, capable of working autonomously in a small, high-trust environment, and focused on ensuring regulatory compliance, security maturity, and audit readiness.

Key Responsibilities:

1. Control/Compliance Assessment:
   • Schedule and coordinate assessments with control owners and third parties.
   • Evaluate the design and effectiveness of security controls.
   • Maintain documentation of assessments and remediation activities.
   • Organise control evidence and notify deviations.
   • Author risk impact reports and communicate findings.
   • Contribute to dashboards and reporting.
   • Support the development of System Security Plans (SSPs).
2. Control/Compliance Improvement:
   • Update and enhance processes and procedures.
   • Propose control improvements and support reporting.
3. Audit/Assessment Support:
   • Manage third-party due diligence and audit preparations.
   • Respond to audit requests and address findings.
4. Continuous Improvement & Collaboration:
   • Identify process improvements.
   • Assist in training team members.
   • Manage vendor BCDR assessments.

Knowledge of DORA, PCDSS, SARBOX is advantageous but not required.