Information Security Governance Analyst

Forvis Mazars; Coventry; On-site; GBP 30,000 - 40,000; Full time

Job summary

A global professional services network is seeking a candidate for an Information Security role focusing on Governance, Risk, and Compliance. This position involves supporting certification activities and managing supplier risk processes. Ideal for individuals looking to start a career in Information Security, strong communication skills and a relevant degree are required. Join a diverse team committed to professional growth and client impact in Coventry, UK.

Qualifications

• This role is suitable for someone looking for a career in Governance, Risk, and Compliance (GRC).
• Understanding fundamental information security principles, concepts, and processes is important.
• Experience is not required, but a proactive and self-motivated approach is essential.

Responsibilities

• Supporting the maintenance of the Cyber Essential Plus and ISO 27001 certification activities.
• Managing the Third-Party Risk Management (TPRM) processes.
• Responding to IT and Security due diligence requests from clients.
• Performing risk and control assessments across IT and Information Security.
• Supporting the design and implementation of an Information Security Awareness Program.
• Reporting on key Information Security metrics.

Skills

Understanding of information security principles

Stakeholder relationship skills

Verbal and written communication skills

Organisational skills

Analytical skills

Interpersonal abilities

Proficiency in English

Education

Bachelor's degree in IT or Cyber Security related field

Job description

Our Information Security function is fundamental to enabling our firm to succeed. Working with innovative business partners and technology, they are responsible for designing, implementing, and managing security solutions to mitigate risk, ensuring the protection of sensitive data, systems, and applications. The team is embedded within the wider IT team, providing IT services to around 4,000 users, across 20 locations, based predominantly in the UK. The Information Security Governance team collaborates closely with both business support teams and the firm's client facing service lines. The team will frequently engage with clients, suppliers, and other third‑parties, supporting security assurance activities, compliance, risk management of suppliers, and maintenance of security certifications and accreditations. The team develops and implements Information Security policies, standards, and procedures, communicating them to all employees through the management of an extensive Information Security Awareness Program. They provide oversight of IT & Information Security controls and ensure integration with Enterprise Risk Management. They monitor and collate considered security metrics and manage robust reporting mechanisms, ensuring executive visibility of IT & Information Security risk.

Responsibilities

• Supporting the maintenance of the Cyber Essential Plus and ISO 27001 certification activities.
• Supporting and managing the Third‑Party Risk Management (TPRM) processes, assessing all new and existing supplier risk.
• Responding to inbound IT & Security due diligence requests from clients.
• Performing and coordinating risk and control assessments across IT and Information Security.
• Supporting the Security Business Partner in the design and implementation of an Information Security Awareness Program, including security training and phishing exercises.
• Collating and reporting on key Information Security metrics such as KPI's, and KRI's, supporting wider Information Security reporting efforts.
• Supporting Information Security Committees and Forums.

Qualifications

• This role is suitable for someone looking for a career in Governance, Risk, and Compliance (GRC). Experience is not required; however, you should understand fundamental information security principles, concepts, and processes.
• A proactive, self‑motivated, and highly professional individual, with strong stakeholder relationship skills.
• Excellent verbal and written communication skills to effectively communicate with stakeholders.
• Exceptional organisational skills, with the ability to efficiently coordinate and prioritise multiple processes within a dynamic information security environment.
• Analytical skills to evaluate risks and support the identification of vulnerabilities.
• Strong interpersonal abilities, fostering relationships and collaborating effectively with the wider IT function.
• Proficient in English (spoken and written), with the ability to communicate effectively in a professional environment.
• Formal qualification in Information Technology, Information Security or a related field. (Bachelors degree in IT or Cyber Security related field, Security+, CISM, CRISC, CISA, CISSP)

Forvis Mazars is a leading global professional services network providing audit & assurance, tax, and advisory services. Forvis Mazars in the UK spans 14 offices across the nation and has over 3,400 professionals, with 190 partners. We have a clear purpose and a shared commitment to shape a better future.

You’ll join a collaborative and inclusive team where you’re supported to grow your skills, explore new opportunities, and contribute from day one. You’ll work with a diverse client base, develop meaningful connections, and gain experience that extends beyond your local team. Together, we grow, belong and impact.

At Forvis Mazars diversity, equity and inclusion are central to our values. We value our people’s unique backgrounds, perspectives, and experience, and know this diversity create better outcomes for our clients.