Senior Information Security Governance Analyst

Carey Olsen; Southampton; On-site; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Training and development

25 days' holiday

Job summary

Carey Olsen in Southampton seeks a Senior Information Security Governance Analyst focused on Innovation and Projects, embedding security, privacy and governance into AI initiatives while maintaining the firm\'s information security framework.

You will work with the Information Security & Data Protection Team, Innovation Team and Technology to deliver secure, compliant projects and build governance metrics and risk reporting.

Qualifications

• Experience in information security, data governance or risk management.
• Knowledge of privacy and data protection requirements.
• Experience supporting risk assessments and governance reviews.
• Degree-level education would be advantageous.

Responsibilities

• Provide information security and governance advice for innovation and AI initiatives across the group.
• Review projects and recommend improvements to security, privacy and data protection controls.
• Support the development of AI governance policies, procedures and user guidance.
• Conduct AI risk assessments and provide recommendations to mitigate identified risks.
• Manage security and privacy assessments, including DPIAs and related reviews.
• Support the maintenance of ISO 27001 and future ISO 42001 management systems.
• Contribute to information governance, data classification and records management initiatives.
• Support client and supplier assurance activities.
• Produce management reporting, key risk indicators and governance metrics.
• Build strong relationships with stakeholders across the business and third-party suppliers.
• Promote cyber security awareness and information governance best practice.

Skills

Information security

Governance

Risk management

AI governance

Stakeholder management

Communication

Analytical thinking

Privacy knowledge

ISO 27001 familiarity

Education

Degree-level education

Tools

ISO 27001

Job description

We have an opportunity for a Senior Information Security Governance Analyst specialising in Innovation and Projects to support the firm's use of innovation technologies and artificial intelligence, while ensuring information assets are managed, protected and governed appropriately.

Based in our Southampton office, this role will support innovation and AI initiatives across the business, embedding security, privacy and governance requirements into projects and maintaining the firm's information security framework.

Working closely with the Information Security & Data Protection Team, Innovation Team, Technology department and key stakeholders, you will help ensure innovation and AI initiatives are delivered securely, responsibly and in line with regulatory and governance requirements.

Duties and responsibilities include:

• Provide information security and governance advice for innovation and AI initiatives across the Group.
• Review projects and recommend improvements to security, privacy and data protection controls.
• Support the development of AI governance policies, procedures and user guidance.
• Conduct AI risk assessments and provide recommendations to mitigate identified risks.
• Manage security and privacy assessments, including DPIAs and related reviews.
• Support the maintenance of ISO 27001 and future ISO 42001 management systems.
• Contribute to information governance, data classification and records management initiatives.
• Support client and supplier assurance activities.
• Produce management reporting, key risk indicators and governance metrics.
• Build strong relationships with stakeholders across the business and third-party suppliers.
• Promote cyber security awareness and information governance best practice.

Candidate Profile:

We are looking for a proactive Information Security Governance professional with experience in information security, data governance or risk management. You will be a strong communicator who enjoys working across technical and business teams, with a genuine interest in innovation, artificial intelligence and emerging technologies.

You should bring:

• Experience in information security, cyber security, data governance or a related field.
• Knowledge of information security, data protection and governance principles.
• Experience supporting risk assessments, security reviews and compliance activities.
• An interest in AI, emerging technologies and AI governance.
• Knowledge of privacy and data protection requirements.
• Understanding of information security standards such as ISO 27001.
• Experience developing or supporting policies, procedures and governance frameworks.
• Strong stakeholder management and communication skills.
• Excellent analytical and problem-solving abilities.
• Relevant information security and/or data protection certifications.
• Degree-level education would be advantageous.

You will thrive in this role if you:

• You are professional, proactive and solutions-focused.
• You have a genuine interest in innovation, AI, cyber security and information governance.
• You communicate confidently and build strong stakeholder relationships.
• You enjoy collaborating across business and technical teams.
• You can manage multiple priorities and work independently.
• You have strong attention to detail and deliver high-quality work.
• You are motivated, adaptable and eager to learn.
• You remain calm and effective in a fast-paced environment.

What we offer in return:

• A 35-hour working week (9:00am – 5:00pm) with a 60-minute lunch break
• Training and development support
• 25 days' holiday with the option to buy or sell up to 5 additional days per financial year