Senior Information Security Governance Analyst (VA831)

Carey Olsen; Eastleigh; On-site; GBP 70,000 - 90,000; Full time

Benefits offered by this job

35-hour working week

Training and development support

25 days' holiday (option to buy/sell 5

Private medical insurance

Pension scheme

Permanent health insurance

Life assurance (4x annual salary)

Job summary

Carey Olsen in Southampton seeks a Senior Information Security Governance Analyst specialising in Innovation and Projects to embed security, privacy and governance into AI initiatives across the firm.

Based in the Southampton office, you will support security and governance across the business, maintaining the information security framework and engaging with multiple teams and third-party providers.

Qualifications

• Experience in information security, data governance or risk management.
• Knowledge of information security, data protection and governance principles.
• Experience supporting risk assessments, security reviews and compliance activities.
• Interest in AI, emerging technologies and AI governance.
• Knowledge of privacy and data protection requirements.
• Understanding of information security standards such as ISO 27001.
• Experience developing or supporting policies, procedures and governance frameworks.
• Strong stakeholder management and communication skills.
• Degree-level education would be advantageous.

Responsibilities

• Provide information security and governance advice for innovation and AI initiatives across the Group.
• Review projects and recommend improvements to security, privacy and data protection controls.
• Support the development of AI governance policies, procedures and user guidance.
• Conduct AI risk assessments and provide recommendations to mitigate identified risks.
• Manage security and privacy assessments, including DPIAs and related reviews.
• Support the maintenance of ISO 27001 and future ISO 42001 management systems.
• Contribute to information governance, data classification and records management initiatives.
• Support client and supplier assurance activities.
• Produce management reporting, key risk indicators and governance metrics.
• Build strong relationships with stakeholders across the business and third-party suppliers.
• Promote cyber security awareness and information governance best practice.

Skills

Information security

Governance

Risk management

Stakeholder management

Communication

Analytical

Problem solving

AI governance

Privacy

Education

Degree-level education

Certifications in information security/data protection

Tools

ISO 27001

DPIAs

Job description

We have an opportunity for a Senior Information Security Governance Analyst specialising in Innovation and Projects to support the firm's use of innovation technologies and artificial intelligence, while ensuring information assets are managed, protected and governed appropriately.

Based in our Southampton office, this role will support innovation and AI initiatives across the business, embedding security, privacy and governance requirements into projects and maintaining the firm's information security framework.

Working closely with the Information Security & Data Protection Team, Innovation Team, Technology department and key stakeholders, you will help ensure innovation and AI initiatives are delivered securely, responsibly and in line with regulatory and governance requirements.

Duties and responsibilities include:

• Provide information security and governance advice for innovation and AI initiatives across the Group.
• Review projects and recommend improvements to security, privacy and data protection controls.
• Support the development of AI governance policies, procedures and user guidance.
• Conduct AI risk assessments and provide recommendations to mitigate identified risks.
• Manage security and privacy assessments, including DPIAs and related reviews.
• Support the maintenance of ISO 27001 and future ISO 42001 management systems.
• Contribute to information governance, data classification and records management initiatives.
• Support client and supplier assurance activities.
• Produce management reporting, key risk indicators and governance metrics.
• Build strong relationships with stakeholders across the business and third-party suppliers.
• Promote cyber security awareness and information governance best practice.

Candidate Profile:

We are looking for a proactive Information Security Governance professional with experience in information security, data governance or risk management. You will be a strong communicator who enjoys working across technical and business teams, with a genuine interest in innovation, artificial intelligence and emerging technologies.

You should bring:

• Experience in information security, cyber security, data governance or a related field.
• Knowledge of information security, data protection and governance principles.
• Experience supporting risk assessments, security reviews and compliance activities.
• An interest in AI, emerging technologies and AI governance.
• Knowledge of privacy and data protection requirements.
• Understanding of information security standards such as ISO 27001.
• Experience developing or supporting policies, procedures and governance frameworks.
• Strong stakeholder management and communication skills.
• Excellent analytical and problem-solving abilities.
• Relevant information security and/or data protection certifications.
• Degree-level education would be advantageous.

You will thrive in this role if you:

• You are professional, proactive and solutions-focused.
• You have a genuine interest in innovation, AI, cyber security and information governance.
• You communicate confidently and build strong stakeholder relationships.
• You enjoy collaborating across business and technical teams.
• You can manage multiple priorities and work independently.
• You have strong attention to detail and deliver high-quality work.
• You are motivated, adaptable and eager to learn.
• You remain calm and effective in a fast-paced environment.

What we offer in return:

• A 35-hour working week (9:00am - 5:00pm) with a 60-minute lunch break
• Training and development support
• 25 days' holiday with the option to buy or sell up to 5 additional days per financial year
• Private medical insurance
• Pension scheme
• Permanent health insurance
• Life assurance (4x annual salary)