At a Glance
- Tasks: Lead security assessments and ensure safe project delivery in a hands-on role.
- Company: Dynamic company focused on real outcomes and innovative security solutions.
- Benefits: Flexible working hours, generous leave, wellness support, and a matched pension scheme.
- Other info: Enjoy a vibrant work culture with opportunities for personal and professional growth.
- Why this job: Make a tangible impact on security while collaborating with tech teams.
- Qualifications: Hands-on experience in information security and strong understanding of cloud security.
The predicted salary is between 55000 - 65000 £ per year.
Information Security Analyst – 4 days in the office and 1 day working remotely. In this hands‑on, delivery‑focused role you will embed pragmatic security assurance into vendor selection, SaaS adoption and project delivery. You will identify security risks early, articulate them clearly and drive them to implementation.
What You'll Be Doing
- Vendor & SaaS Security Assurance: Lead assessments of new and existing vendors and SaaS platforms, reviewing identity and access controls, data protection, hosting environments, vulnerability management and incident response. Translate findings into risk statements, mitigations and acceptance options with evidence for investor, audit and assurance reviews.
- Secure Project Delivery: Engage early in projects and technical change to shape security before designs are finalised. Review architectures and delivery approaches, challenge credential handling, access lifecycle, key rotation and logging expectations. Work pragmatically with delivery teams, including those using Azure DevOps, integrating security into plans.
- Operational Risk Follow‑Through: Ensure identified risks are tracked and remediated, follow up on overdue items and escalated with evidence and clear options.
- Risk & Governance Support: Maintain a decision‑focused risk register, prepare concise risk summaries and evidence packs and improve governance where it enhances clarity and accountability.
Why This Role is Different
- Not policy‑only
- Not compliance‑led
- Focused on real delivery, real controls and real outcomes
Requirements
- Essential experience: Hands‑on experience in information security roles with technical and assurance responsibilities. Experience assessing vendors, SaaS platforms or third parties. Strong understanding of cloud and SaaS security, identity and access management, secrets management and key rotation, vulnerability management. Comfortable working with engineers and delivery teams and communicating risk clearly and credibly.
- Desirable: Experience supporting investor‑led or audit requirements, familiarity with modern delivery tooling such as Azure DevOps, exposure to secure design or architecture reviews and ability to thrive in fast‑moving, low‑process environments.
Benefits
- Benefits are designed to enhance wellbeing and provide flexibility.
- Core working hours with flexibility; two weeks “Work from Anywhere” per year.
- 28 days annual leave plus bank holidays; your birthday off; purchase additional leave.
- 5% matched pension scheme; life assurance; discounted gym membership; health cash plan; confidential mental wellbeing support.
- Cycle to Work scheme; seasonal ticket loan.
- 25% off at Fora cafés; two volunteer days per year.
We are an equal opportunity employer and welcome applications from all backgrounds.
Senior Information Security Analyst - Governance & Delivery in London employer: Fora
As a Senior Information Security Analyst at our company, you will thrive in a dynamic work environment that prioritises real delivery and impactful outcomes. With a strong focus on employee wellbeing, we offer flexible working arrangements, generous leave policies, and a supportive culture that encourages professional growth and collaboration. Join us to be part of a team that values your expertise and fosters innovation in the field of information security.
StudySmarter Expert Advice🤫
We think this is how you could land Senior Information Security Analyst - Governance & Delivery in London
✨Tip Number 1
Network like a pro! Reach out to folks in the industry, attend meetups or webinars, and connect with people on LinkedIn. You never know who might have the inside scoop on job openings or can refer you directly.
✨Tip Number 2
Prepare for interviews by practising common questions and scenarios related to information security. Think about how you would handle vendor assessments or project delivery challenges, and be ready to share your experiences.
✨Tip Number 3
Showcase your skills through real-world examples. When discussing your experience, highlight specific projects where you identified risks or improved security measures. This will demonstrate your hands-on expertise and problem-solving abilities.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, we love seeing candidates who are proactive and engaged with our company.
We think you need these skills to ace Senior Information Security Analyst - Governance & Delivery in London
Some tips for your application 🫡
Tailor Your CV:Make sure your CV speaks directly to the role of Senior Information Security Analyst. Highlight your hands-on experience in information security, especially with vendor assessments and SaaS platforms. We want to see how your skills align with our focus on pragmatic security assurance!
Craft a Compelling Cover Letter:Your cover letter is your chance to shine! Use it to explain why you're passionate about security governance and delivery. Share specific examples of how you've identified and mitigated risks in past roles. We love seeing your personality come through!
Showcase Relevant Experience:When detailing your experience, focus on your technical and assurance responsibilities. Mention any work with Azure DevOps or secure design reviews. We’re looking for candidates who can communicate risk clearly and work well with delivery teams, so make that clear!
Apply Through Our Website:We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you don’t miss out on any important updates. Plus, we love seeing applications come in through our own platform!
How to prepare for a job interview at Fora
✨Know Your Stuff
Make sure you brush up on your knowledge of information security, especially around vendor assessments and SaaS platforms. Be ready to discuss specific examples from your past experience where you've identified risks and implemented solutions.
✨Speak Their Language
Familiarise yourself with the technical jargon and tools mentioned in the job description, like Azure DevOps. Being able to communicate effectively with engineers and delivery teams will show that you can integrate seamlessly into their processes.
✨Prepare for Scenario Questions
Expect questions that ask how you would handle specific security challenges or project scenarios. Think through potential risks and how you would articulate them clearly, as well as the mitigations you would propose.
✨Show Your Pragmatic Side
This role is all about real delivery and outcomes, so be prepared to discuss how you've worked pragmatically in the past. Highlight instances where you've balanced security needs with project timelines and team dynamics.