Information Security And Assurance Analyst

MLR Associates; Pirbright; Hybrid; GBP 35,000 - 40,000; Full time

Benefits offered by this job

Hybrid working

Benefits package

Job summary

MLR Associates is recruiting an Information Security and Assurance Analyst to support customer security assurance and the organisation's ISO/IEC 27001:2022 ISMS.

Based in Woking, Surrey, the role is hybrid, offering exposure to governance, operations and audits, with responsibilities including coordinating security questionnaires, maintaining evidence, tracking risk treatments and supporting audit readiness.

Qualifications

• Experience in information security, assurance or compliance.
• Understanding of ISO 27001/ISMS concepts.
• Ability to coordinate security questionnaires and audits.

Responsibilities

• Coordinate customer security questionnaires and DDQs.
• Maintain ISMS records and evidence.
• Support audit readiness and security controls.
• Collaborate with Head of UK IT and Governance.

Skills

Information Security

ISMS

Risk Management

Audit Support

Job description

• Senior IT Security Analyst


• SaaS - Platform based Technology Services


• Woking Surrey/Hybrid Working


• £35-40k salary + benefits package

Our client a global technology leader is currently looking for a Information Security and Assurance Analyst.

This role supports customer security assurance and the continued operation of the organisation's ISO/IEC 27001:2022 Information Security Management System.

The analyst will coordinate customer security questionnaires, Due Diligence Questionnaires and Site Security Surveys; maintain assurance evidence and ISMS records; track risk treatments and corrective actions; and support recurring security controls, awareness activities and audit readiness.

This is an accountable analyst position with responsibility for coordinating work, maintaining reliable evidence and following actions through to completion.

Responsibilities (key tasks and requirements of the role):-

We welcome candidates with direct information security, assurance or compliance experience. We will also consider established first or second-line IT professionals whose technical, security and operational experience provides a strong foundation for moving into assurance.

Applicants transitioning from technical IT should understand how business IT services and common security controls operate, even where they have not previously owned an ISMS, completed customer assurance assessments or supported formal audits.

Essential Attributes:-

Candidates may bring direct Information Security and assurance experience or relevant transferable experience from an established technical IT role.

Guidance and mentoring will be available from the Head of UK IT and Governance to support development in less familiar areas, including ISO 27001, customer assurance, risk management, ISMS maintenance and audit activity.

The role offers exposure across technical operations, governance, customer assurance and organisational stakeholders, with opportunities to broaden existing capability and undertake increasingly varied assurance work.