InfoSec Risk & Compliance Analyst – Insurance

G MASS Consulting; Greater London; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Length: Initial 2 month contract

Job summary

G MASS Consulting seeks an Information Security Analyst to support a Lloyd's / London Market engagement on a fixed-term contract ending November 2026. You will embed within the client's information security function, delivering hands-on support across third-party risk, security operations, incident response and regulatory assurance.

The role is client-facing and delivery-focused, requiring the ability to work independently within a regulated financial services environment and to translate

Qualifications

• Experience in information security or IT risk within financial services or regulated sectors.
• Hands-on third-party security risk assessments and due diligence.
• Knowledge of ISO 27001, NIST CSF, NYDFS, FCA and PRA expectations.
• Experience with incident response and evidence gathering.
• Ability to communicate risk to business stakeholders clearly.
• Professional certifications (CISSP, CISM or ISO 27001 Lead Auditor/Implementer) desirable.

Responsibilities

• Complete supplier security due diligence and risk assessments with clear remediation actions.
• Triage and respond to security requests, providing risk-based guidance.
• Coordinate incident response and follow-up per established processes.
• Gather evidence and respond to audits and regulatory requests.
• Perform structured risk and control assessments of third parties and projects.

Skills

Information Security

Cyber Risk

IT Risk

Third-Party Risk

ISO 27001

NIST CSF

Regulatory Compliance

Incident Response

Stakeholder Engagement

Documentation & Audit

CISSP / CISM

Job description

G MASS Consulting seeks an Information Security Analyst to support a Lloyd's / London Market engagement on a fixed-term contract ending November 2026. You will embed within the client's information security function, delivering hands-on support across third-party risk, security operations, incident response and regulatory assurance.

The role is client-facing and delivery-focused, requiring the ability to work independently within a regulated financial services environment and to translate