Information Security Risk Analyst

London / WFH to £90k

Are you an Information Security professional with experience in risk assessment, security governance and control assurance?

You could be progressing your career in an impactful role at a tech driven, global Asset Manager with multiple billions of dollars under management.

Role Overview

As an Information Security Risk Analyst you'll play a key role in implementing and strengthening security risk management, helping the business make informed decisions while maintaining robust security standards in a changing regulatory and technology landscape.

Key Responsibilities

• Assess security risks across systems, projects, technology changes, AI tools and third party suppliers, translating your findings into practical recommendations and actionable risk treatment plans.
• Maintain the Information Security Risk Register, ensuring risks have clear ownership, appropriate controls and effective remediation through to closure.
• Evaluate security controls against recognised frameworks such as ISO 27001 and NIST CSF, identify gaps and support maturity assessments to benchmark the organisation's security posture.
• Working closely with Security Operations and Engineering, analyse monthly key risk indicators (KRIs), using threat, vulnerability and incident data to identify trends, highlight systemic weaknesses and communicate business risk.
• Contribute to security governance, preparing reports for risk forums and senior management, managing policy exceptions and risk acceptances and tracking decisions and actions.
• Help maintain security policies, standards and procedures, monitor evolving regulatory requirements including FCA regulation, DORA and GDPR and support internal and external audits.