InfoSec Risk Analyst - Drive Security & Compliance

Otsuka; City Of London; On-site; GBP 65,000 - 110,000; Full time

Job summary

Orbis is modernising its core platform with a focus on data protection and AI risk. We are seeking an Information Security Risk Analyst to identify, assess and track security risk across our technology estate and third parties, turning insights into evidence-based decisions for the business.

Reporting to the Security Manager, you will work on ISO 27001/NIST CSF controls, regulatory requirements (FCA, DORA, GDPR) and oversee risk registers, KRIs and due diligence for clients and suppliers.

Qualifications

• 5+ years of experience in information security, IT risk, audit or GRC, with a track record of running risk processes independently.
• Bachelor's degree in information security, computer science or a related field, or equivalent experience.
• Security risk assessment experience, including maintaining a risk register, assessing controls and tracking remediation.
• Good technical understanding across infrastructure, networks, cloud and applications.
• Working knowledge of security frameworks (ISO 27001, NIST CSF) and regulatory requirements such as FCA, DORA and GDPR.
• Relevant certifications (e.g. CISM, CRISC, CISSP) are strongly preferred.
• Strong interpersonal and communication skills.

Responsibilities

• Assess security risk across systems, data and third parties and translate findings into actionable decisions.
• Manage third-party security risk and monitor risk over supplier relationships.
• Assess controls against frameworks and track remediation to closure.
• Maintain the Information Security Risk Register with ownership and escalation paths.
• Produce and analyse KRIs and report security risk to management.
• Support governance by preparing materials for risk forums and policy decisions.
• Benchmark maturity and participate in assurance activities and audits.
• Monitor regulatory requirements and support audits and regulatory responses.
• Assist client due diligence with security questionnaires and requests.

Skills

Information security

Risk assessment

Regulatory compliance

Communication

Problem solving

Security controls

Regulatory requirements

Education

Bachelor's degree in information security or computer science

Tools

ISO 27001

NIST CSF

Job description

Orbis is modernising its core platform with a focus on data protection and AI risk. We are seeking an Information Security Risk Analyst to identify, assess and track security risk across our technology estate and third parties, turning insights into evidence-based decisions for the business.

Reporting to the Security Manager, you will work on ISO 27001/NIST CSF controls, regulatory requirements (FCA, DORA, GDPR) and oversee risk registers, KRIs and due diligence for clients and suppliers.