Information Security Risk Analyst

Titan Wealth Planning Limited; London; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

Titan Wealth Planning Limited is seeking a detail-oriented Information Security Governance, Risk, and Compliance (GRC) Analyst to enhance its security framework. The ideal candidate will manage security risks and ensure compliance with industry standards while driving effective communication across teams. This role offers a competitive salary and a range of benefits, including a hybrid working model and support for further education.

Benefits

Attractive Employee Pension Scheme (7.5% employer & minimum 3% employee)

25 days Annual Leave + public holidays

Buy and sell holidays up to 5 days

Further education and training support

Discretionary performance-related bonus

Confidential Employee Assistance Programme

2 days per year for voluntary work

Flexible benefits

Qualifications

• Experience in information security risk management or compliance.
• Strong understanding of information security frameworks like ISO 27001, NIST.
• Ability to work independently in a fast-paced environment.

Responsibilities

• Support development and enforcement of information security policies.
• Conduct risk assessments on technology systems and vendors.
• Assist in preparing for regulatory audits and compliance reviews.

Skills

Organisational Skills

Communication Skills

Documentation Skills

Education

Industry certifications such as CISA, CRISC, CISSP

Tools

GRC tools/platforms

Job description

The Titan Group provides a broad range of services across the whole wealth value chain – from financial planning, investment management through to platform, trading, settlement and custody services. Its strategy is to be able to offer modular, incremental services to its clients allowing them to adjust their business models as and when they choose to. As part of this Titan is also an active acquirer of UK based asset managers and other wealth related businesses.

Due to this Titan Wealth is expanding rapidly through strategic acquisitions, offering a unique combination of start-up energy and the security of private equity backing. It’s an inspiring time to join the team!

Looking for a self-starting highly motivated and detail-orientated Information Security Governance, Risk, and Compliance (GRC) Analyst to support the design, implementation, and ongoing improvement of our information security governance and risk management framework. This role is essential in ensuring the organisation proactively manages information security risk across its employees, technologies, vendors, and operations and adheres to the regulatory and security standards pertinent to financial services while providing visibility to key stakeholders.

Job Responsibilities

• Support the development, maintenance, and enforcement of information security policies, procedures, and standards
• Conduct risk assessments on technology systems, third-party vendors, and new services.
• Drive, monitor and track remediation efforts related to incidents, assurance internal audits, external audits, and security assessments
• Strong stakeholder management skills, working closely with business and technical teams to ensure security controls are implemented and effective
• Assist in preparing for and responding to regulatory audits and compliance reviews (e.g., NIST CSF, ISO 27001, DORA, GDPR. ITGC)
• Maintain and update the information security risk register with appropriate scenarios and control frameworks
• Conduct regular control testing, evaluation and reporting findings to stakeholders
• Stay current on changes in regulations, industry standards, and emerging risks
• Support user awareness across induction, annual training and intranet
• Report on information security risk and performance indicators to relevant committees
• Support security awareness training and internal compliance communications

Job Requirements

• Previous progressive experience in information security risk management, risk management, or compliance
• Strong understanding of information security frameworks (e.g., ISO 27001, NIST)
• Experience with GRC tools/platforms
• Excellent organisational, communication, and documentation skills
• Ability to work independently and cross-functionally in a fast-paced environment
• Industry certifications such as CISA, CRISC, CISSP, CISMis preferred

Our employees are talented people, distinguished by excellence. You will be able to demonstrate a willingness to embrace the Company values of:

Professionalism - how we treat our clients and colleagues.

Trust - embrace innovation and adapt to change.

Innovation - dare to create and don't fear failure.

Terms

- Competitive salary

- Attractive Employee Pension Scheme (7.5% employer & minimum 3% employee)

- 25 days Annual Leave + public holidays

- Buy and sell holidays up to 5 days

- Office Christmas close (3-days)

- A range of benefits which includes private medical insurance, Group life insurance, and income protection insurance.

- Hybrid working

- Further education and training support

- Discretionary performance related bonus

- Confidential Employee Assistance Programme

- 2 days per year for voluntary work

- And lots of flexible benefits to choose from!

The Titan Wealth Group is firmly committed to fostering an inclusive and equitable environment for everyone who works with us, regardless of their race, age, gender, sexual orientation, religion, physical ability or disability, or political affiliation. We believe that having a diverse team allows us to create the best possible outcomes for our clients and team members. We strive to provide equal opportunities in all aspects of the workplace with respect to recruitment and career advancement, pay and benefits, training and development opportunities and other job-related activities.