Information Security Governance Analyst

Stott and May; London; On-site; GBP 40,000 - 70,000; Full time

Job summary

A leading company in global travel and event management seeks an Information Security Governance Analyst in London. This role involves managing security policies, conducting risk assessments, and ensuring compliance with industry standards. Ideal candidates will have strong communication skills, a proactive approach, and a relevant professional certification.

Qualifications

• Knowledge of industry standards such as NIST, ISO 27001, and PCI DSS.
• Experience with internal and external stakeholders.
• Understanding of data protection best practices and GDPR requirements.

Responsibilities

• Maintain information security policies and conduct risk assessments.
• Manage the third-party risk programme and respond to security queries.
• Support security incident responses and contribute to audits.

Skills

Attention to detail

Communication

Interpersonal skills

Education

Professional certification in information security or risk management

Job description

Information Security Governance Analyst, London

Client:

Stott and May

Location:

London, United Kingdom

Job Category:

Other

EU work permit required:

Yes

Job Reference:

e9798c66ba0c

Job Views:

2

Posted:

02.06.2025

Expiry Date:

17.07.2025

Job Description:

Job description

Information Security Governance Analyst

Location: London, UK

Sector: Travel

Stott and May have partnered with a leader in global travel and event management, renowned for exceptional service and innovative, client-focused technology.

We are seeking a highly skilled Information Security Governance Analyst to join our expanding client in their GRC function. Reporting to the Information Security Governance Manager, you will play a critical role in the strategic growth.

What you will do:

1. Maintain information security policies, procedures, and standards.
2. Conduct risk assessments and maintain the information security risk register to implement agreed treatment plans.
3. Manage the third-party risk programme, including supplier and partner due diligence.
4. Contribute to internal and external audits to maintain certifications and meet business needs.
5. Respond to client queries regarding Reed & Mackay’s security posture and compliance management framework.
6. Support security incident response and answer security queries from internal stakeholders.
7. Stay updated on evolving security standards and internal organizational changes to keep the risk and client trust programme current.

What We’re Looking For:

1. Working knowledge of industry standards such as NIST, ISO 27001, and PCI DSS.
2. Experience working with internal and external stakeholders.
3. Excellent attention to detail, proactive approach, and ability to work independently.
4. Strong communication and interpersonal skills.
5. Understanding of business continuity, security concepts, and technologies.
6. Knowledge of data protection best practices and GDPR requirements.
7. Proficiency in French, Spanish, Italian, or German is a plus.
8. Professional certification in information security, risk management, or third-party risk management is desirable.

Apply Now: Ready to take your career to the next level? Apply today and be part of their exciting journey in shaping the future of business travel.