Senior InfoSec & GRC Analyst (6-Month FTC)

Legalandgeneral; Hove; On-site; GBP 60,000 - 75,000; Full time

Benefits offered by this job

Bonus plan

Life assurance

Healthcare plan

25 days holiday

Employee discounts

Job summary

Legal & General (L&G) seeks a Senior Information Security Analyst on a fixed-term contract to strengthen information security across Retirement Retail and Investment businesses. You will work with technology teams and business stakeholders to manage security risks and controls.

The role involves translating policies into practical designs, advising on security controls, monitoring risks, supporting vulnerability assessments, and collaborating with third parties.

Qualifications

• Understanding of information security principles and controls.
• Experience in IT/technology, information security, risk or business environment.
• Strong analytical and judgement skills.
• Clear written and verbal communication with stakeholders.
• Good organisational skills and ability to prioritise deadlines.
• Degree or equivalent practical experience in CS/IT/business.

Responsibilities

• Interpreting security policies and translating them into architecture designs.
• Advising project managers, developers and stakeholders on security controls.
• Monitoring current and emerging security risks and proposing solutions.
• Supporting vulnerability assessments from scans.
• Collaborating to review findings and risk ratings.
• Evaluating third‑party suppliers’ security maturity and supporting due diligence.
• Reviewing configurations to identify issues and improvements.
• Supporting the scoping of penetration tests and documenting findings.

Skills

Information security

Encryption

Identity & access

SIEM

Risk management

Analytical skills

Communication

Stakeholder management

Education

Relevant degree or equivalent practical experience

Job description

Legal & General (L&G) seeks a Senior Information Security Analyst on a fixed-term contract to strengthen information security across Retirement Retail and Investment businesses. You will work with technology teams and business stakeholders to manage security risks and controls.

The role involves translating policies into practical designs, advising on security controls, monitoring risks, supporting vulnerability assessments, and collaborating with third parties.