Edenbrook
Information Security Analyst
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Information Security Analyst
We are currently partnering with a market-leading Insurance Broker to recruit an Information Security Analyst. The successful candidate will take ownership of day-to-day security activities, maintain accurate security records and reporting, coordinate follow-up actions, and work closely with colleagues across Technology, Risk, Compliance, Legal, HR and Operations.
Key Responsibilities:
- Maintain current and accessible information-security policies, procedures, standards, guidance and supporting documentation.
- Support the collection, organisation and maintenance of evidence for internal reviews, external audits, client due diligence and regulatory assurance activities.
- Maintain security risk registers, action trackers, control records, exception logs and incident documentation.
- Produce clear, accurate and timely security reports and dashboards covering risks, actions, vulnerabilities, supplier assurance and control status.
- Support the continuous improvement of security processes, templates, documentation and reporting.
- Assist with information-security risk assessments covering systems, business processes, technology projects, suppliers and change initiatives.
- Support security due diligence for suppliers and third parties by reviewing questionnaires, policies, certifications, audit reports and supporting evidence.
- Track outstanding supplier-security actions and maintain accurate records of assessments, risks, exceptions and remediation plans.
- Monitor security alerts, vulnerabilities, control exceptions and security-related tasks, escalating higher-risk findings where appropriate.
- Triage straightforward security issues, gather relevant information and escalate potential incidents or higher-risk findings promptly.
- Assist with reviews of access control, endpoint security, email security, identity management and other security controls.
- Support the investigation, documentation and coordination of information-security incidents, including lessons learned and follow-up improvement actions.
- Support security-awareness communications, training, phishing simulations and the creation of clear security guidance for employees and stakeholders.
- Handle confidential information with integrity and discretion, comply with relevant policies, regulations and professional standards, and undertake reasonable ad hoc security tasks and projects.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Skills & Experience:
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Practical experience in information security, cyber security, IT, technology risk, compliance, audit or a related discipline.
- Understanding of core information-security principles, including confidentiality, integrity, availability, risk management and data protection.
- Familiarity with common cyber-security threats, including phishing, social engineering, malware, ransomware, credential compromise and cloud-security risks.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location