Information Security Risk Analyst in London

Information Security Risk Analyst London / WFH to 90kAre you an Information Security professional with experience in risk assessment, security governance and control assurance?You could be progressing your career in an impactful role at a tech driven, global Asset Manager with multiple billions of dollars under management.As an Information Security Risk Analyst you'll play a key role in implementing and strengthening security risk management, helping the business make informed decisions while maintaining robust security standards in a changing regulatory and technology landscape.You'll assess security risks across systems, projects, technology changes, AI tools and third party suppliers, translating your findings into practical recommendations and actionable risk treatment plans. You'll maintain the Information Security Risk Register, ensuring risks have clear ownership, appropriate controls and effective remediation through to closure.You'll evaluate security controls against recognised frameworks such as ISO 27001 and NIST CSF, identify gaps and support maturity assessments to benchmark the organisation's security posture. Working closely with Security Operations and Engineering, you'll analyse monthly key risk indicators (KRIs), using threat, vulnerability and incident data to identify trends, highlight systemic weaknesses and communicate business risk.You'll also contribute to security governance, preparing reports for risk forums and senior management, managing policy exceptions and risk acceptances and tracking decisions and actions. You'll help maintain security policies, standards and procedures, monitor evolving regulatory requirements including FCA regulation, DORA and GDPR and support internal and external audits.Location / WFH:There's a hybrid work from home policy with three days in the London office per week where you'll join a supportive, diverse team environment with a large range of facilities.About you:You have experience in a similar Information Security Risk AnalystYou have a strong understanding of security risk assessment, control frameworks and remediationYou're familiar with ISO 27001, NIST CSF and relevant regulatory requirements, ideally within financial servicesYou have experience assessing third party security risk and maintaining risk registersYou can interpret security metrics and translate technical findings into clear business risks and recommendationsYour comfortable using AI in your daily activitiesYou have strong communication skills, with confidence engaging technical teams, suppliers and senior stakeholdersYou have a proactive, analytical approach, with the ability to manage multiple risks and drive actions through to completionYou are degree educated, having achieved a 2.1 or above from a top tier university, e.g. Russel Group / OxbridgeWhat's in it for you:Salary to 90kPensionPrivate medical insurance including 24 hour GP accessEnhanced parental leave policy25 days annual leaveOngoing training and development and financial support for courses Apply now to find out more about this Information Security Risk Analyst opportunity.