Remote Information Security Analyst (CE+ & ISO27001)

Cera Care Ltd; Greater London; On-site; GBP 40,000 - 65,000; Full time

Benefits offered by this job

25 days holiday + birthday off

Company pension scheme

Training and development

Service and Recognition awards

Employee Assistance Programme

Job summary

Cera Care Ltd is seeking an Information Security Analyst to join our growing security team. You will drive CE+ certification efforts and support ISO27001, NHS Supplier Assurance, and policy documentation, gaining hands-on experience across audit, risk and governance in a fast-growing healthcare tech business.

This role suits someone early in their information security career, offering exposure to certification processes, risk registers, security awareness initiatives, and collaboration with

Qualifications

• Candidates should be curious, proactive and willing to learn.
• Strong written communication to draft clear policies and liaise with partners.
• Understanding of Cyber Essentials technical control themes (firewalls, secure config, access control, malware protection, patching).
• Interest in frameworks like ISO27001, NHS assurance, and NIST.

Responsibilities

• Support achievement and maintenance of Cyber Essentials Plus (CE+) certification, coordinating evidence and liaising with the certifying body.
• Assist ISO27001 implementation, gap analysis, evidence collection, and ISMS documentation maintenance.
• Support NHS Supplier Assurance by completing security questionnaires and gathering evidence.
• Contribute to Data Security and DSPT submission and other healthcare assurance frameworks as required.
• Support policy/documentation work, drafting and maintaining security policies, standards and procedures.

Skills

Proactive mindset

Written communication

Cyber Essentials

ISO27001 familiarity

NIST knowledge

Risk & governance

Tools

MDM/endpoint platforms

Vulnerability management

Configuration baselines

CE+ evidence tooling

Job description

Cera Care Ltd is seeking an Information Security Analyst to join our growing security team. You will drive CE+ certification efforts and support ISO27001, NHS Supplier Assurance, and policy documentation, gaining hands-on experience across audit, risk and governance in a fast-growing healthcare tech business.

This role suits someone early in their information security career, offering exposure to certification processes, risk registers, security awareness initiatives, and collaboration with