Senior Information Security Governance Analyst (VA831)

Carey Olsen; Southampton; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

35-hour work week

Training and development

25 days holiday (+ options)

Private medical insurance

Pension scheme

Permanent health insurance

Life assurance (4x salary)

Job summary

Carey Olsen in Southampton seeks a Senior Information Security Governance Analyst to advise on security, privacy and data governance for AI initiatives. You will review projects, support policy development and conduct AI risk assessments across the group.

The role requires 3+ years in information security or data governance, strong communication and stakeholder management, and familiarity with ISO 27001. A degree in a related field is advantageous, with a 35-hour work week typical in the UK.

Qualifications

• Experience in information security, data governance, or risk management.
• Knowledge of information security, data protection and governance principles.
• Experience supporting risk assessments, security reviews and compliance activities.
• Interest in AI, emerging technologies and AI governance.
• Knowledge of privacy and data protection requirements.
• Understanding of ISO 27001 and governance frameworks.
• Experience developing or supporting policies, procedures and governance processes.
• Strong stakeholder management and communication skills.
• Degree-level education would be advantageous.

Responsibilities

• Provide information security and governance advice for AI initiatives across the Group.
• Review projects and recommend improvements to security, privacy and data protection controls.
• Support the development of AI governance policies, procedures and user guidance.
• Conduct AI risk assessments and provide recommendations to mitigate identified risks.
• Manage security and privacy assessments, including DPIA reviews.
• Support maintenance of ISO 27001 and future ISO 42001 management systems.
• Contribute to information governance, data classification and records management initiatives.
• Support client and supplier assurance activities.
• Produce management reporting, key risk indicators and governance metrics.
• Build relationships with stakeholders across business and third-party suppliers.
• Promote cyber security awareness and information governance best practice.

Skills

Information security

Data governance

Risk management

AI governance

ISO 27001

Policies & governance

Stakeholder management

Communication

Analytical thinking

Education

Degree in information security or related field

Job description

Senior Information Security Governance Analyst (VA831)

Location: Southampton

Department: Technology

Experience: At least 3 years experience in a previous information security or data governance type role, advising and shaping how technology solutions can utilise AI and support business innovation

Duties and responsibilities include:

• Provide information security and governance advice for innovation and AI initiatives across the Group.
• Review projects and recommend improvements to security, privacy and data protection controls.
• Support the development of AI governance policies, procedures and user guidance.
• Conduct AI risk assessments and provide recommendations to mitigate identified risks.
• Manage security and privacy assessments, including DPIAs and related reviews.
• Support the maintenance of ISO 27001 and future ISO 42001 management systems.
• Contribute to information governance, data classification and records management initiatives.
• Support client and supplier assurance activities.
• Produce management reporting, key risk indicators and governance metrics.
• Build strong relationships with stakeholders across the business and third-party suppliers.
• Promote cyber security awareness and information governance best practice.

Candidate Profile:

We are looking for a proactive Information Security Governance professional with experience in information security, data governance or risk management. You will be a strong communicator who enjoys working across technical and business teams, with a genuine interest in innovation, artificial intelligence and emerging technologies.

You should bring:

• Experience in information security, cyber security, data governance or a related field.
• Knowledge of information security, data protection and governance principles.
• Experience supporting risk assessments, security reviews and compliance activities.
• An interest in AI, emerging technologies and AI governance.
• Knowledge of privacy and data protection requirements.
• Understanding of information security standards such as ISO 27001.
• Experience developing or supporting policies, procedures and governance frameworks.
• Strong stakeholder management and communication skills.
• Excellent analytical and problem-solving abilities.
• Relevant information security and/or data protection certifications.
• Degree-level education would be advantageous.

You will thrive in this role if you:

• You are professional, proactive and solutions-focused.
• You have a genuine interest in innovation, AI, cyber security and information governance.
• You communicate confidently and build strong stakeholder relationships.
• You enjoy collaborating across business and technical teams.
• You can manage multiple priorities and work independently.
• You have strong attention to detail and deliver high-quality work.
• You are motivated, adaptable and eager to learn.
• You remain calm and effective in a fast-paced environment.

What we offer in return:

• A 35-hour working week (9:00am – 5:00pm) with a 60-minute lunch break
• Training and development support
• 25 days' holiday with the option to buy or sell up to 5 additional days per financial year
• Private medical insurance
• Pension scheme
• Permanent health insurance
• Life assurance (4x annual salary)