At a Glance
- Tasks: Support security policies and manage risk assessments in a dynamic environment.
- Company: Join a global professional services firm committed to security and privacy excellence.
- Benefits: Enjoy a competitive salary and hybrid working options for better work-life balance.
- Why this job: Make a real impact on security practices while collaborating with diverse teams.
- Qualifications: Experience in information security and knowledge of ISO 27001 is essential.
- Other info: This is a 6-month fixed-term contract with opportunities for professional growth.
The predicted salary is between 42000 - 84000 £ per year.
A global professional services firm is seeking a proactive Information Security Analyst to support the delivery of robust security and privacy policies across its global operation. This role is ideal for someone with hands-on experience in information risk management, policy compliance, ISO 27001, and client security due diligence.
Key Responsibilities:
- Maintain and evolve the firm’s Information Security Management System (ISMS) and associated documentation
- Support audits and ensure security practices align with industry standards (e.g., ISO 27001, Cyber Essentials)
- Assist with Business Continuity Management (BCM) - including BIAs, BCPs, exercises, and training
- Manage and respond to security incidents, conducting root cause analysis and recommending improvements
- Deliver risk assessments, Data Privacy Impact Assessments (DPIAs), and third-party compliance checks
- Handle client cyber due diligence questionnaires and close remedial actions
- Work closely with Risk & Compliance, IT, and other business teams to embed security practices into operations
- Support the cyber team in aligning security measures with application and infrastructure development
What We’re Looking For:
- Demonstrable experience in information security and privacy risk management
- Working knowledge of ISO 27001, Cyber Essentials, and CIS Controls frameworks
- Ability to articulate security risks and controls clearly to technical and non-technical stakeholders
- Strong analytical and written communication skills
- Security certifications (e.g., CISSP, CISM, CIISec) are advantageous or a willingness to work towards them
- Highly organised, professional, and able to work under pressure
This is a fantastic opportunity to make a tangible contribution to a business where security, privacy, and operational resilience are core priorities. If you’re passionate about driving security excellence in a global environment, this contract role could be the perfect fit.
Information Security Analyst - 6-Month FTC - Governance, Risk and Compliance employer: Precise Placements
Contact Detail:
Precise Placements Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Information Security Analyst - 6-Month FTC - Governance, Risk and Compliance
✨Tip Number 1
Familiarise yourself with ISO 27001 and Cyber Essentials frameworks. Understanding these standards will not only help you in interviews but also demonstrate your commitment to the role and its requirements.
✨Tip Number 2
Network with professionals in the information security field, especially those who have experience in governance, risk, and compliance. Engaging with industry experts can provide insights and potentially lead to referrals.
✨Tip Number 3
Prepare to discuss real-world scenarios where you've managed security incidents or conducted risk assessments. Being able to share specific examples will showcase your hands-on experience and problem-solving skills.
✨Tip Number 4
Stay updated on the latest trends and threats in information security. Showing that you're proactive about learning and adapting to new challenges can set you apart from other candidates.
We think you need these skills to ace Information Security Analyst - 6-Month FTC - Governance, Risk and Compliance
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights relevant experience in information security, risk management, and compliance. Use keywords from the job description, such as ISO 27001 and Cyber Essentials, to demonstrate your fit for the role.
Craft a Compelling Cover Letter: Write a cover letter that showcases your passion for information security and your understanding of the company's priorities. Mention specific experiences that align with the responsibilities listed in the job description, such as managing security incidents or conducting risk assessments.
Highlight Relevant Certifications: If you have any security certifications like CISSP or CISM, be sure to mention them prominently in your application. If you're working towards these certifications, include that information as well to show your commitment to professional development.
Proofread Your Application: Before submitting, carefully proofread your CV and cover letter for any spelling or grammatical errors. A polished application reflects your attention to detail, which is crucial in the field of information security.
How to prepare for a job interview at Precise Placements
✨Showcase Your Technical Knowledge
Be prepared to discuss your hands-on experience with information risk management and compliance frameworks like ISO 27001. Highlight specific projects or situations where you successfully implemented security measures.
✨Communicate Clearly
Practice articulating complex security concepts in a way that non-technical stakeholders can understand. This will demonstrate your ability to bridge the gap between technical and non-technical teams.
✨Prepare for Scenario-Based Questions
Expect questions that ask how you would handle specific security incidents or compliance challenges. Think of examples from your past experience where you managed risks or responded to incidents effectively.
✨Demonstrate Your Organisational Skills
Since the role requires managing multiple tasks under pressure, be ready to discuss how you prioritise your workload and ensure that security practices are embedded into operations efficiently.