InfoSec GRC Analyst — ISO/NIST Risk & Compliance

Banner-Life-Family-of-Companies; Hove; Hybrid; GBP 60,000 - 80,000; Full time

Benefits offered by this job

Annual bonus plan

Share schemes

Generous pension contribution

Life assurance

Healthcare Plan (permanent employees)

Job summary

Legal & General (L&G) is seeking an Information Security GRC Analyst to strengthen our information and cyber security framework across Retirement Retail and Investment business areas. You’ll work with technology teams and stakeholders to manage security risks and controls, drawing on ISO 27001 and NIST standards.

This role suits someone who enjoys analysing complex information, developing practical solutions and contributing to a supportive, inclusive team.

Qualifications

• Understanding of information security principles and controls (encryption, IAM, SIEM)
• Experience in IT, technology, information security, risk or business-focused environment
• Strong analytical and judgement skills with practical solutions
• Clear written and verbal communication with stakeholders
• Organisational skills and ability to prioritise deadlines
• Experience of report writing, risk management or security engineering would be beneficial
• Adaptable and curious approach, willing to learn new technologies
• Degree or equivalent practical experience in computer science/IT or related discipline

Responsibilities

• Interpreting security policies and translating into architecture patterns and designs
• Advising project managers, developers and stakeholders on security controls
• Monitoring current and emerging security risks and recommending solutions
• Supporting vulnerability assessments from scans
• Collaborating with teams to review findings, compensating controls and risk ratings
• Evaluating third-party suppliers’ security maturity and supporting due diligence
• Reviewing configurations to identify security issues and improvements
• Supporting scoping of penetration tests and documenting findings

Skills

Information security

ISO 27001

NIST

Analytical skills

Communication

Stakeholder collaboration

Education

Degree in computer science/IT or related field

Tools

SIEM

Security assessments

Job description

Legal & General (L&G) is seeking an Information Security GRC Analyst to strengthen our information and cyber security framework across Retirement Retail and Investment business areas. You’ll work with technology teams and stakeholders to manage security risks and controls, drawing on ISO 27001 and NIST standards.

This role suits someone who enjoys analysing complex information, developing practical solutions and contributing to a supportive, inclusive team.