Strategic Information Security Risk Analyst

Orbis Investment Management Limited; Greater London; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

Orbis Investment Management Limited in London is seeking an Information Security Risk Analyst to identify, assess and track information security risk across our technology estate, data and third parties, turning findings into clear, evidence-based decisions for the business.

You will report to the Security Manager and help maintain risk registers, KRIs, and governance materials while ensuring regulatory requirements such as FCA, DORA and GDPR are incorporated into risk management and audit

Qualifications

• 5+ years of experience in information security, IT risk, audit or GRC.
• Experience maintaining a risk register and running risk processes.
• Familiarity with ISO 27001, NIST CSF, FCA, DORA and GDPR.

Responsibilities

• Assess security risk across systems, data and third parties with evidence-based recommendations.
• Manage third-party security risk and due diligence on suppliers and cloud services.
• Review controls against frameworks and track remediation to closure.
• Maintain the Information Security Risk Register and KRIs monthly.
• Support governance, policy exceptions and risk acceptances for senior management.
• Participate in maturity assessments and help prioritise improvement roadmaps.
• Monitor regulatory requirements and assist audits and client due diligence.

Skills

Information security

IT risk

GRC

Regulatory requirements

Risk assessment

Communication

Problem-solving

Education

Bachelor's degree in information security, computer science or related field

Job description

Orbis Investment Management Limited in London is seeking an Information Security Risk Analyst to identify, assess and track information security risk across our technology estate, data and third parties, turning findings into clear, evidence-based decisions for the business.

You will report to the Security Manager and help maintain risk registers, KRIs, and governance materials while ensuring regulatory requirements such as FCA, DORA and GDPR are incorporated into risk management and audit