Information Security Risk Analyst – Hybrid, £80k–£90k

Client Server Limited; Greater London; Hybrid; GBP 80,000 - 90,000; Full time

Benefits offered by this job

Pension

Private medical insurance

24 hour GP access

Enhanced parental leave policy

25 days annual leave

Training and development support

Job summary

Client Server Limited in London seeks an Information Security Risk Analyst to strengthen risk management across systems, projects, AI tools and third‑party suppliers. You will maintain the Information Security Risk Register with clear ownership, implement controls and drive remediation to closure, while reporting into risk forums and senior management.

You’ll evaluate controls against ISO 27001 and NIST CSF, monitor KRIs, analyse threat data, and ensure compliance with FCA, DORA and GDPR in a

Qualifications

• Experience in risk assessment, security governance and control assurance.
• Familiarity with ISO 27001 and NIST CSF; regulatory awareness in financial services preferred.
• Experience with third party security risk and maintaining risk registers.
• Ability to translate technical findings into clear business risks and recommendations.

Responsibilities

• Assess security risks across systems, projects, technology changes, AI tools and third party suppliers.
• Maintain Information Security Risk Register with ownership and remediation tracking.
• Evaluate security controls against ISO 27001 and NIST CSF; identify gaps and support maturity assessments.
• Prepare reports for risk forums and senior management; manage policy exceptions and risk acceptances.
• Monitor regulatory requirements including FCA, DORA and GDPR and support internal and external audits.

Skills

Risk assessment

Security governance

ISO 27001

NIST CSF

Regulatory compliance

Third party risk

Risk registers

AI tools familiarity

Communication

Analytical thinking

Education

Bachelor's degree (2.1 or above)

Tools

None

Job description

Client Server Limited in London seeks an Information Security Risk Analyst to strengthen risk management across systems, projects, AI tools and third‑party suppliers. You will maintain the Information Security Risk Register with clear ownership, implement controls and drive remediation to closure, while reporting into risk forums and senior management.

You’ll evaluate controls against ISO 27001 and NIST CSF, monitor KRIs, analyse threat data, and ensure compliance with FCA, DORA and GDPR in a