InfoSec GRC Analyst: Impactful Security & Flexible Work

Legalandgeneral; Portslade by Sea; On-site; GBP 45,000 - 60,000; Full time

Benefits offered by this job

Life assurance

Healthcare Plan

25 days holiday plus public holidays

Job summary

Legal & General is seeking an Information Security GRC Analyst in the United Kingdom to strengthen information and cyber security across Retirement Retail and Investment areas. You will work with technology teams and stakeholders to manage security risks and controls, drawing on ISO 27001 and NIST frameworks.

This role suits someone who enjoys analysing complex information, developing practical solutions and contributing to a collaborative team.

Qualifications

• Understanding of information security principles and controls (encryption, IAM, SIEM)
• Experience in IT/security/risk environments
• Clear written and verbal communication with stakeholders

Responsibilities

• Interpret security policies and translate them into practical architecture patterns and designs
• Advise project teams on security controls and best practices
• Monitor current and emerging security risks and propose proportionate solutions
• Support vulnerability assessments from application and infrastructure scans
• Collaborate with technical teams to review findings and risk ratings
• Evaluate third‑party suppliers’ security maturity and support due diligence
• Review configurations for security issues and implement improvements
• Assist in planning penetration tests and documenting findings

Skills

Information security principles

ISO 27001

NIST frameworks

Encryption

Identity and access management

Security monitoring

Risk assessment

Strong communication

Education

Relevant degree or equivalent practical experience in computer science/IT/business

Job description

Legal & General is seeking an Information Security GRC Analyst in the United Kingdom to strengthen information and cyber security across Retirement Retail and Investment areas. You will work with technology teams and stakeholders to manage security risks and controls, drawing on ISO 27001 and NIST frameworks.

This role suits someone who enjoys analysing complex information, developing practical solutions and contributing to a collaborative team.