Senior Information Security Governance Analyst (VA831) in Southampton

Southampton Full-Time No working from home possible

Apply Now

We have an opportunity for a Senior Information Security Governance Analyst specialising in Innovation and Projects to support the firm's use of innovation technologies and artificial intelligence, while ensuring information assets are managed, protected and governed appropriately.

Based in our Southampton office, this role will support innovation and AI initiatives across the business, embedding security, privacy and governance requirements into projects and maintaining the firm's information security framework.

Working closely with the Information Security & Data Protection Team, Innovation Team, Technology department and key stakeholders, you will help ensure innovation and AI initiatives are delivered securely, responsibly and in line with regulatory and governance requirements.

Duties and responsibilities include:

Provide information security and governance advice for innovation and AI initiatives across the Group.
Review projects and recommend improvements to security, privacy and data protection controls.
Support the development of AI governance policies, procedures and user guidance.
Conduct AI risk assessments and provide recommendations to mitigate identified risks.
Manage security and privacy assessments, including DPIAs and related reviews.
Support the maintenance of ISO 27001 and future ISO 42001 management systems.
Contribute to information governance, data classification and records management initiatives.
Support client and supplier assurance activities.
Produce management reporting, key risk indicators and governance metrics.
Build strong relationships with stakeholders across the business and third-party suppliers.
Promote cyber security awareness and information governance best practice.

Candidate Profile:

We are looking for a proactive Information Security Governance professional with experience in information security, data governance or risk management. You will be a strong communicator who enjoys working across technical and business teams, with a genuine interest in innovation, artificial intelligence and emerging technologies.

You should bring:

Experience in information security, cyber security, data governance or a related field.
Knowledge of information security, data protection and governance principles.
Experience supporting risk assessments, security reviews and compliance activities.
An interest in AI, emerging technologies and AI governance.
Knowledge of privacy and data protection requirements.
Understanding of information security standards such as ISO 27001.
Experience developing or supporting policies, procedures and governance frameworks.
Strong stakeholder management and communication skills.
Excellent analytical and problem-solving abilities.
Relevant information security and/or data protection certifications.
Degree-level education would be advantageous.

You will thrive in this role if you:

You are professional, proactive and solutions-focused.
You have a genuine interest in innovation, AI, cyber security and information governance.
You communicate confidently and build strong stakeholder relationships.
You enjoy collaborating across business and technical teams.
You can manage multiple priorities and work independently.
You have strong attention to detail and deliver high-quality work.
You are motivated, adaptable and eager to learn.
You remain calm and effective in a fast-paced environment.

What we offer in return:

A 35-hour working week (9:00am – 5:00pm) with a 60-minute lunch break
Training and development support
25 days' holiday with the option to buy or sell up to 5 additional days per financial year
Private medical insurance
Pension scheme
Permanent health insurance
Life assurance (4x annual salary)

Please click on "Apply for this job" to submit a CV for this vacancy.