Bestman Solutions
Information Security Assurance Analyst
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Information Security Assurance Analyst
Southampton | Hybrid | Full-Time
Security is easy to talk about. Building assurance that stands up to regulatory scrutiny is considerably harder. That's why this role exists. Humans do enjoy creating increasingly complex systems, then hiring other humans to make sure they don't accidentally catch fire.
We're looking for an Information Security Assurance Analyst to join a highly regulated organisation where you'll help ensure security risks are understood, managed, and embedded across technology and business change.
This role would suit someone who enjoys working across governance and technical teams, balancing risk management with practical security assurance.
What you'll be doing
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
- Assess information security risks across projects, technology, and operational change.
- Provide security assurance throughout the delivery lifecycle.
- Conduct threat modelling exercises and support secure-by-design principles.
- Review technical architectures and challenge security controls where appropriate.
- Work closely with infrastructure, network, and engineering teams to improve security outcomes.
- Support risk assessments, control reviews, and remediation activities.
- Contribute to security policies, standards, and governance processes.
- Help ensure compliance within a regulated environment.
What we're looking for
- Experience in Information Security, Cyber Security, or Security Assurance.
- Strong understanding of information security risk management and assurance.
- Experience facilitating or contributing to threat modelling activities.
- Solid understanding of network technologies, including TCP/IP, routing, switching, firewalls, segmentation, and secure connectivity.
- Ability to communicate technical security risks to both technical and non-technical stakeholders.
- Experience working within a regulated environment would be highly beneficial.
- Familiarity with frameworks such as ISO 27001, NIST CSF, CIS Controls, or similar.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
If you're looking for a role where you can combine technical understanding with strong security assurance and risk management expertise, we'd be interested in hearing from you.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills