Strategic Information Security Risk Analyst

ORBIS Corporation; Greater London; On-site; GBP 50,000 - 80,000; Full time

Benefits offered by this job

Autonomy

Growth opportunities

Philanthropy opportunities

Job summary

Orbis is modernising its core platform and building AI solutions while protecting edge through robust information security risk management. An Information Security Risk Analyst will identify, assess and track risk across technology, data and third parties, turning findings into evidence-based decisions for the business.

You will work under the Security Manager and contribute to risk governance, regulatory compliance, and risk reporting across the firm's technology estate.

Qualifications

• 5+ years of experience in information security, IT risk, audit or GRC, with a track record of running risk processes independently.
• Bachelor’s degree in information security, computer science or a related field, or equivalent professional experience.
• Security risk assessment experience, including maintaining a risk register, assessing controls and tracking remediation.
• Good technical understanding across core technology domains such as infrastructure, networks, cloud, identity and applications.
• Working knowledge of security frameworks and regulatory requirements such as FCA, DORA and GDPR.
• Relevant certifications (e.g. CISM, CRISC, CISSP, ISO 27001 Lead Implementer/Auditor) are strongly preferred.
• Strong interpersonal and communication skills – you’ll present findings to both technical and business audiences.

Responsibilities

• Assess security risk by conducting risk assessments of new systems, changes, projects and emerging technology, including AI tools, and turning findings into actionable recommendations.
• Manage third-party security risk with due diligence on suppliers and cloud services and monitor risk over relationships.
• Assess controls by reviewing design and operation against frameworks; identify gaps and track remediation to closure.
• Maintain the Information Security Risk Register across systems, data and suppliers with clear ownership and escalation paths.
• Produce and analyse KRIs, turning threat and incident data into business risk and trends.
• Support security governance by preparing risk forum materials, managing policy exceptions and risk acceptances.
• Benchmark maturity by participating in information security assessments against frameworks and update improvement roadmaps.
• Maintain security policies, standards and procedures and monitor regulatory requirements (FCA, DORA, GDPR).
• Support client due diligence by responding to questionnaires and due diligence requests.

Skills

5+ years information security

Bachelor’s degree information security

Security risk assessment

Technical knowledge: infra, networks,

Regulatory frameworks: FCA, DORA, GDPR

Certifications: CISM, CRISC, CISSP

Strong communication skills

Education

Bachelor’s degree in information security, CS or related field

Tools

ISO 27001 Lead Implementer/Auditor

Job description

Orbis is modernising its core platform and building AI solutions while protecting edge through robust information security risk management. An Information Security Risk Analyst will identify, assess and track risk across technology, data and third parties, turning findings into evidence-based decisions for the business.

You will work under the Security Manager and contribute to risk governance, regulatory compliance, and risk reporting across the firm's technology estate.