ISO 27001-Focused Security Governance Analyst (Hybrid)

The Opportunity Hub UK Ltd; Glasgow; Hybrid; GBP 31.000 - 47.000; Vollzeit

Benefits dieser Stelle

Equity in a business

Hybrid working from Glasgow base

Learning and development budget

Flat structure

Zusammenfassung

The Opportunity Hub UK Ltd in Glasgow is seeking an Information Security Governance Analyst to join our cyber security team. You will maintain the ISMS, run risk assessments, support audits, and ensure governance aligns with ISO 27001 and other frameworks.

You will write clear security policies, monitor regulatory obligations, and collaborate with engineers to embed governance checks into existing workflows. A couple of years of security or compliance experience is preferred.

Qualifikationen

• 2+ years in information security, risk or compliance
• Experience with ISO 27001, Cyber Essentials or SOC 2 preferred
• Able to read and write policy documents precisely
• Understanding of risk assessment methodologies and translating findings into actions
• Strong stakeholder communication to explain governance to engineers
• CISMP, CISA or CISSP in progress is a plus
• Organised with ability to track multiple moving parts

Aufgaben

• Maintain and improve the ISMS, aligning policies to ISO 27001 and other frameworks
• Run risk assessments across internal systems and client environments, track remediation to completion
• Support audit cycles by gathering evidence and closing findings
• Monitor regulatory and contractual obligations, flag gaps
• Write and update security policies, standards and procedures in plain language
• Work with engineering teams to embed governance checks into workflows

Kenntnisse

ISO 27001

Policy writing

Risk assessment

Stakeholder comms

Certifications in progress

Governance coordination

Jobbeschreibung

The Opportunity Hub UK Ltd in Glasgow is seeking an Information Security Governance Analyst to join our cyber security team. You will maintain the ISMS, run risk assessments, support audits, and ensure governance aligns with ISO 27001 and other frameworks.

You will write clear security policies, monitor regulatory obligations, and collaborate with engineers to embed governance checks into existing workflows. A couple of years of security or compliance experience is preferred.