InfoSec GRC Analyst — Flexible, Impactful Security

Legal & General; United Kingdom; On-site; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Bonus plan

Pension contribution

Life assurance

Healthcare plan

Job summary

Legal & General is seeking an Information Security GRC Analyst to strengthen security across Retirement Retail and Investment businesses. You’ll work with tech teams and stakeholders, applying ISO 27001 and NIST frameworks to manage risk and controls.

The role suits someone who enjoys analysing complex information, developing practical solutions, and contributing to an inclusive team. Flexible working options are available.

Qualifications

• Understanding information security principles and controls such as encryption, IAM, and SIEM.
• Experience in IT, technology, information security, risk or business environment.
• Strong analytical and judgement skills with ability to propose practical solutions.
• Clear written and verbal communication with stakeholders.

Responsibilities

• Interpret security policies and translate into architecture patterns and designs.
• Advise project managers, developers and stakeholders on security controls.
• Monitor current and emerging security risks and recommend solutions.
• Support assessment of vulnerabilities from scans and reviews.

Skills

Information security principles

Encryption

Identity and access management

SIEM experience

Education

Relevant degree

Tools

ISO 27001

NIST

Job description

Legal & General is seeking an Information Security GRC Analyst to strengthen security across Retirement Retail and Investment businesses. You’ll work with tech teams and stakeholders, applying ISO 27001 and NIST frameworks to manage risk and controls.

The role suits someone who enjoys analysing complex information, developing practical solutions, and contributing to an inclusive team. Flexible working options are available.