Lead / Senior Information Security Analyst

allpay Limited; England; On-site; GBP 50,000 - 70,000; Full time

Job summary

A financial technology firm is seeking a Lead Information Security Analyst to oversee security management and compliance activities. Ideal for a candidate with a strong background in information security frameworks such as ISO 27001 and PCI DSS. The role includes mentoring team members and ensuring the organization meets security standards. This position promotes a collaborative work culture with opportunities for professional development.

Benefits

Competitive benefits package

Onsite gym

Private healthcare cover

Qualifications

• Strong working knowledge of ISO 27001, PCI DSS, and Cyber Essentials Plus.
• Ability to support and prepare for audits.
• Excellent stakeholder communication skills.

Responsibilities

• Lead operation of the Information Security Management System (ISMS).
• Coordinate internal and external audit readiness.
• Draft and update information security policies.

Skills

IT background

Knowledge of ISO 27001

Knowledge of PCI DSS

Communication skills

Attention to detail

Education

Degree in Cyber Security or related discipline

Job description

About The Role

We’re looking for a proactive and capable Lead Information Security Analyst, or a Senior Analyst who’s ready to take the next step in their career into team leadership and management.

This is an ideal opportunity for someone with strong hands-on experience of information security frameworks and audit processes, looking to grow and develop further in their career.

Working closely with the Head of Operational Governance, you’ll support and coordinate key compliance activities across ISO 27001, PCI DSS, and Cyber Essentials Plus. You’ll also take the lead in drafting policies, engaging with suppliers, and contributing to commercial tenders from a data protection and risk perspective.

This role includes the opportunity to lead, mentor and support the members of the Information Security team.

Key Responsibilities

• Lead on the operation and continual improvement of the Information Security Management System (ISMS)
• Coordinate internal and external audit readiness for ISO 27001, PCI DSS, and Cyber Essentials Plus
• Draft and update information security policies, procedures, and technical standards
• Work with procurement and commercial teams to support supplier assurance and risk assessment
• Contribute to tender responses and bid processes, ensuring security and compliance requirements are met
• Promote good security practices and raise awareness across departments
• Act as an escalation point and day-to-day contact for other team members.
• Stay up to date with changes in legislation and standards relating to information and cyber security

About You

The ideal candidate will have the following:

Essential:

• Relevant knowledge and background in either IT, Cyber Security, Information Systems, or a related discipline.
• Strong working knowledge of ISO 27001, PCI DSS, and Cyber Essentials Plus.
• Evidenced ability to support and prepare for audits, including evidence collation and audit readiness.
• Outstanding attention to detail with the ability to write and maintain high-quality documentation.
• Excellent stakeholder communication skills, both written and verbal, with the ability to build effective working relationships and influence at all levels.
• Comfortable working independently and proactively across teams.

Desirable:

• Exposure to supplier risk management and/or tender processes
• ISO 27001 Lead Auditor/Implementer, PCIP, CISM, CompTIA Security+, CISMP

Why Join Us?

You will play a key role in protecting our organisation’s data and systems, ensuring we meet the highest information security standards and compliance requirements, and you’ll join a professional and dedicated team that values curiosity, collaboration, integrity and agility.

Here at allpay, we follow an Office First working model, reflecting the importance we place on in-person collaboration across our teams, most of whom are based on-site. While we are open to discussing flexible working arrangements, a strong on-site presence will be essential to support the existing teams and projects.

About Us

People are at the heart of allpay and we reward our employee with a competitive benefits package which includes, a defined contribution group pension scheme, income protection, life assurance, an array of health and wellbeing options including private healthcare cover and an onsite gym. This is coupled with our excellent Learning and Development offering.

We work with some great recruitment agencies. We don’t choose to partner with everyone.Explicit consent or confirmation must be received from our HR department before we accept CV’s.Contractual terms and specific campaigns must have been signed and agreed before you are considered a partner.We never accept unsolicited CV’s, EVER! Even from our trusted partners. We consider it “spoiling,” which does not endear you to us.By sending us unsolicited CV’s we deem these a free gift. If we choose to engage these candidates directly we will not pay you any fees.You will be deemed to have accepted this zero fee by providing unsolicited or spoiled candidates.

We are a company committed to Equal Opportunities.

All roles at allpay Limited are subject to successful background checks including a DBS and Credit Check.