Information Security Risk Analyst

Client Server Limited; Greater London; Hybrid; GBP 80,000 - 90,000; Full time

Benefits offered by this job

Pension

Private medical insurance

24 hour GP access

Enhanced parental leave policy

25 days annual leave

Training and development support

Job summary

Client Server Limited in London seeks an Information Security Risk Analyst to strengthen risk management across systems, projects, AI tools and third‑party suppliers. You will maintain the Information Security Risk Register with clear ownership, implement controls and drive remediation to closure, while reporting into risk forums and senior management.

You’ll evaluate controls against ISO 27001 and NIST CSF, monitor KRIs, analyse threat data, and ensure compliance with FCA, DORA and GDPR in a

Qualifications

• Experience in risk assessment, security governance and control assurance.
• Familiarity with ISO 27001 and NIST CSF; regulatory awareness in financial services preferred.
• Experience with third party security risk and maintaining risk registers.
• Ability to translate technical findings into clear business risks and recommendations.

Responsibilities

• Assess security risks across systems, projects, technology changes, AI tools and third party suppliers.
• Maintain Information Security Risk Register with ownership and remediation tracking.
• Evaluate security controls against ISO 27001 and NIST CSF; identify gaps and support maturity assessments.
• Prepare reports for risk forums and senior management; manage policy exceptions and risk acceptances.
• Monitor regulatory requirements including FCA, DORA and GDPR and support internal and external audits.

Skills

Risk assessment

Security governance

ISO 27001

NIST CSF

Regulatory compliance

Third party risk

Risk registers

AI tools familiarity

Communication

Analytical thinking

Education

Bachelor's degree (2.1 or above)

Tools

None

Job description

London, Greater London | £80k - £90k per year

Information Security Risk Analyst London / WFH to £90k

Are you an Information Security professional with experience in risk assessment, security governance and control assurance?

You could be progressing your career in an impactful role at a tech driven, global Asset Manager with multiple billions of dollars under management.

As an Information Security Risk Analyst you'll play a key role in implementing and strengthening security risk management, helping the business make informed decisions while maintaining robust security standards in a changing regulatory and technology landscape.

You’ll assess security risks across systems, projects, technology changes, AI tools and third party suppliers, translating your findings into practical recommendations and actionable risk treatment plans. You’ll maintain the Information Security Risk Register, ensuring risks have clear ownership, appropriate controls and effective remediation through to closure.

You’ll evaluate security controls against recognised frameworks such as ISO 27001 and NIST CSF, identify gaps and support maturity assessments to benchmark the organisation's security posture. Working closely with Security Operations and Engineering, you’ll analyse monthly key risk indicators (KRIs), using threat, vulnerability and incident data to identify trends, highlight systemic weaknesses and communicate business risk.

You’ll also contribute to security governance, preparing reports for risk forums and senior management, managing policy exceptions and risk acceptances and tracking decisions and actions. You’ll help maintain security policies, standards and procedures, monitor evolving regulatory requirements including FCA regulation, DORA and GDPR and support internal and external audits.

Location / WFH:

There's a hybrid work from home policy with three days in the London office per week where you’ll join a supportive, diverse team environment with a large range of facilities.

About you:

• You have experience in a similar Information Security Risk Analyst
• You have a strong understanding of security risk assessment, control frameworks and remediation
• You're familiar with ISO 27001, NIST CSF and relevant regulatory requirements, ideally within financial services
• You have experience assessing third party security risk and maintaining risk registers
• You can interpret security metrics and translate technical findings into clear business risks and recommendations
• Your comfortable using AI in your daily activities
• You have strong communication skills, with confidence engaging technical teams, suppliers and senior stakeholders
• You have a proactive, analytical approach, with the ability to manage multiple risks and drive actions through to completion
• You are degree educated, having achieved a 2.1 or above from a top tier university, e.g. Russel Group / Oxbridge

What's in it for you:

• Salary to £90k
• Pension
• Private medical insurance including 24 hour GP access
• Enhanced parental leave policy
• 25 days annual leave
• Ongoing training and development and financial support for courses