Information Security Risk & Compliance Analyst

AAB; Leeds; Hybrid; GBP 40,000 - 60,000; Full time

Benefits offered by this job

Annual leave with option to buy or carry over

Enhanced parental leave

Paid volunteering day

Private Medical Insurance

Employee Assistance Programme

Competitive pension scheme

Life assurance policies

Hybrid working model

Modern office spaces

Job summary

A leading consultancy firm in the UK seeks an Information Security Risk & Compliance Analyst to support the Information Security Management System's maintenance and improvement. This role involves preparing for audits, monitoring compliance, and providing guidance on regulatory inquiries. Candidates should have experience in risk, compliance, or internal audit, and a knowledge of ISO 27001. The firm offers a hybrid working model and various employee benefits including private medical insurance and enhanced parental leave.

Qualifications

• Experience in a professional services business is preferred.
• Firm understanding of ISO 27001 is crucial.
• Must maintain high integrity and confidentiality.

Responsibilities

• Support maintenance and improvement of the Information Security Management System.
• Assist in preparations for ISO 27001 audits.
• Monitor compliance with policies and procedures.

Skills

Experience within a risk, information security, compliance or internal audit environment

Knowledge of ISO 27001

High level of integrity and attention to detail

Ability to engage all levels of seniority

Effective use of technology

Structured and organized communicator

Job description

Information Security Risk & Compliance Analyst

Department: Risk & Compliance

Location: Leeds (preferably Glasgow or Leeds within close proximity to an AAB UK office)

Application Deadline: 14 April 2026

Key Responsibilities

• Support the maintenance and continual improvement of the Information Security Management System in accordance with ISO 27001 requirements.
• Assist in preparing for internal and external ISO 27001 audits.
• Monitor compliance with policies and procedures and follow up on findings or non‑conformities.
• Help maintain ISMS documentation, including asset registers, risk assessments and Statements of Applicability (SoA).
• Provide guidance and support with third‑party security assessments.
• Contribute to enterprise risk assessments, control testing and follow‑up actions.
• Assist with risk, compliance and regulatory queries from the wider AAB team.
• Support other regulatory compliance process checks and reviews.

Skills, Knowledge and Expertise

• Experience within a risk, information security, compliance or internal audit environment, preferably in a professional services business.
• Knowledge of ISO 27001.
• High level of integrity, confidentiality and attention to detail.
• Willingness to engage all levels of seniority across the business and to escalated issues appropriately.
• Forward thinking and effective use of technology.
• Structured, organised and a good communicator.

Benefits

Time Off & Family Support

• Annual leave (plus public holidays), with the option to buy or carry over leave.
• Enhanced parental leave (maternity, paternity, adoption).
• Paid volunteering day to support causes that matter to you.

Health & Wellbeing

• Private Medical Insurance (PMI) for you and the option to cover family members.
• Employee Assistance Programme (EAP) for 24/7 mental health and wellbeing support.
• Death in Service benefit.

Financial Security

• Competitive pension scheme.
• Life assurance policies to support you and your family.

Flexible & Agile Working

• Hybrid working model.
• Agile working culture that supports flexible hours and smarter working.
• Modern office spaces designed for collaboration, focus, and wellbeing.