InfoSec Analyst: ISO 27001/27018 Compliance & Audits

Alfa Financial Software Limited; Greater London; Hybrid; GBP 50,000 - 75,000; Full time

Benefits offered by this job

Hybrid working

Private health insurance

Pension contribution match

Job summary

Alfa Financial Software Limited is seeking an Information Security Analyst to strengthen ISO 27001/27018 compliance across our global client base. You’ll help maintain the ISMS, work with auditors, and translate complex security requirements for stakeholders.

This role requires hands-on ISO controls experience, strong analytical skills, and the ability to collaborate with engineers, auditors and senior leadership. A regulated industry background and Jira/Confluence familiarity are helpful.

Qualifications

• Bachelor's degree from a top university.
• Hands-on experience with ISO 27001 compliance methodologies and audit procedures.
• Analytical, problem-solver with attention to detail and strong organisational skills.
• Clear documentation and reporting, able to translate complex requirements for diverse stakeholders.
• At least 2 years’ experience in a related information security role.
• Experience in regulated environments and familiarity with other security frameworks is a plus (e.g., NIST, CSA STAR).

Responsibilities

• Maintain and continuously improve the ISMS and related policies and procedures.
• Participate in ISO 27001/27018 audits and audits such as SSAE 18 / ISAE 3402 SOC 1 Type 2/2.
• Support internal and external audits and regulatory inspections; compile evidence for scrutiny.
• Collaborate with engineers, auditors and leadership to communicate security requirements clearly.

Skills

Information security principles

Audit procedures

Analytical thinking

Documentation and reporting

Stakeholder communication

Regulated industry awareness

Education

Bachelor's degree

Tools

Jira

Confluence

Job description

Alfa Financial Software Limited is seeking an Information Security Analyst to strengthen ISO 27001/27018 compliance across our global client base. You’ll help maintain the ISMS, work with auditors, and translate complex security requirements for stakeholders.

This role requires hands-on ISO controls experience, strong analytical skills, and the ability to collaborate with engineers, auditors and senior leadership. A regulated industry background and Jira/Confluence familiarity are helpful.