Senior InfoSec GRC Analyst — Security Risk & Controls

Legal And General Group; England; On-site; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Annual bonus

Share schemes

Generous pension

Life assurance

Healthcare plan

25 days holiday + public holidays + 1–

Electric car scheme

Employee discounts

Net-zero offices

Job summary

Legal And General Group is seeking an Information Security GRC Analyst to strengthen security governance across Retirement Retail and Investment areas. You will collaborate with technology teams and business stakeholders, applying ISO 27001 and NIST frameworks to manage risks and controls.

You’ll analyse complex information, develop practical solutions, and contribute to a supportive, inclusive team. Transferable skills are welcome; training will be provided to build expertise in information

Qualifications

• Understanding of information security principles and controls.
• Experience in IT, technology, information security, risk or business-focused environment.
• Strong analytical and judgement skills.
• Clear written and verbal communication with stakeholders.
• Good organisational skills and deadlines management.
• Experience with report writing, risk management or security engineering would be beneficial.
• Degree or equivalent practical experience in computer science, IT or related discipline.

Responsibilities

• Translate policies into practical architecture patterns.
• Advise project managers, developers and other stakeholders on security controls.
• Monitor current and emerging security risks and propose proportional solutions.
• Support the assessment of vulnerabilities identified through scans.
• Collaborate with technical teams to review findings and risk ratings.
• Evaluate third-party suppliers’ security maturity and support due diligence, tender and contract reviews.
• Review system/configurations to identify security issues and improvements.
• Scope penetration tests and document findings.

Skills

InfoSec basics

IT environment

Analytical thinking

Communication skills

Organisational skills

Report writing

Adaptable mindset

Degree in CS/IT

Education

Degree in CS/IT or related

Job description

Legal And General Group is seeking an Information Security GRC Analyst to strengthen security governance across Retirement Retail and Investment areas. You will collaborate with technology teams and business stakeholders, applying ISO 27001 and NIST frameworks to manage risks and controls.

You’ll analyse complex information, develop practical solutions, and contribute to a supportive, inclusive team. Transferable skills are welcome; training will be provided to build expertise in information