InfoSec Analyst: ISO 27001 & Risk Expert (Hybrid)

Vitality; Lower Blandford St Mary; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Bonus schemes

Pension up to 12%

Vitality health insurance

Life assurance

Job summary

Vitality in the United Kingdom is seeking an Information Security Analyst to protect member data, assess risk, and strengthen controls. This role sits in the Information Security team and works across projects to maintain security standards.

You will deliver practical security advice, contribute to the Information Security Management System, and help ensure compliance with ISO 27001 and other frameworks while supporting security training and incident management.

Qualifications

• Experience in information security roles and applying security controls.
• Experience with ISO 27001, ISO 27002, PCI DSS or similar frameworks.
• Strong ability to translate security requirements for non-technical stakeholders.
• Knowledge of data protection and regulatory compliance requirements.

Responsibilities

• Provide clear, practical information security guidance to stakeholders.
• Support ongoing development and improvement of the Information Security Management System (ISO 27001).
• Conduct security risk assessments across processes, systems and projects with appropriate mitigations.
• Perform internal audits against ISO 27001 requirements and produce audit reports.
• Collaborate with project teams to address security risks throughout the software lifecycle.
• Develop, implement and maintain information security policies, standards and procedures.
• Support Data Loss Prevention, access management and security monitoring initiatives.
• Complete due diligence on third-party suppliers and perform site visits when required.
• Contribute to security training and awareness activities.
• Assist in investigating and managing information security incidents and audit activities.

Skills

Security risk assessment

Regulatory compliance

Stakeholder communication

Education

CISSP/CISA/CRISC certification

Job description

Vitality in the United Kingdom is seeking an Information Security Analyst to protect member data, assess risk, and strengthen controls. This role sits in the Information Security team and works across projects to maintain security standards.

You will deliver practical security advice, contribute to the Information Security Management System, and help ensure compliance with ISO 27001 and other frameworks while supporting security training and incident management.