Information Security Controls Assurance Analyst in London

Join our team at the Guardian and be a part of a diverse and inclusive global organisation that delivers fearless, investigative journalism and holds power to account. Our team of award-winning journalists, cutting-edge commercial professionals and industry-leading digital experts are committed to making a difference and represent a wide range of backgrounds and perspectives. We offer a challenging and exciting environment for career development, with a focus on training, growth and fostering an inclusive culture.

We are now looking for a Controls Assurance Analyst to join our Information Security team! The Controls Assurance Analyst will support the Assurance Manager in delivering the information security assurance programme. You’ll perform control testing, coordinate assurance evidence, support audits and compliance activities, monitor remediation actions, and provide assurance reporting that demonstrates the effectiveness of the organisation's security control environment.

About the role:

• Perform scheduled testing of Information Security controls to assess both design and operating effectiveness.
• Execute control assessments across key security domains including Identity and Access Management, Vulnerability Management, Security Monitoring, Cloud Security, Data Protection and Third Party Security.
• Maintain documentation supporting compliance with security policies, standards and regulatory requirements, including internal and external Information Security audits.
• Support assurance activities relating to customer and third-party security assessments.
• Monitor compliance against Information Security policies, standards and regulatory requirements.
• Assist in mapping security controls to recognised frameworks including NIST, PCI DSS, ISO 27001, ISO 42001 and assist in identifying compliance gaps and supporting remediation planning.
• Support assurance activities relating to privacy, information governance and secure data handling.

About you:

• Demonstrated experience performing Information Security control testing and assurance activities, including a good understanding of control design and operating effectiveness.
• Good experience collecting, validating and maintaining assurance evidence.
• Familiarity with internal and external audit processes.
• Understanding of Information Security frameworks including ISO 27001, NIST CSF, NIST 800-53 and CIS Controls and experience mapping controls against recognised security frameworks.
• Understanding of security control domains including Identity and Access Management, Vulnerability Management, Security Monitoring, Cloud Security, Data Protection.
• Strong analytical and documentation skills with the ability to produce clear reporting, dashboards and management information.
• Strong communication and stakeholder engagement skills.

We actively encourage applications from groups traditionally underrepresented in the UK media. We operate in a hybrid environment working 3 days a week from our offices in Kings Cross and 2 days a week remotely. We value and respect all differences (seen and unseen) in all people. We aspire to have inclusive working experiences and an environment that reflects the audience we serve, where our people have equal access to career development opportunities, their voices are heard and can contribute to our future. We actively encourage applications from people of all backgrounds.

Benefits at the Guardian:

• You’ll have 30 days of annual leave per year (plus bank holidays) with the option to purchase an additional 5 days.
• Our pension scheme is generous; if you contribute 5% then we will contribute 8-12% (depending on your age).
• Employees are given 2 volunteering days annually and the option of payroll giving.
• Season ticket loans are also available.
• You are entitled to private healthcare, life cover, income protection, and eye tests. You can also opt in to dental insurance.
• We have enhanced maternity, paternity, adoption and shared parental leave policies in place.
• We also support our employees by offering an IVF, menopause, baby loss, and trans equality policy.

Culture and wellbeing:

We want everyone to feel like they belong at the Guardian and we champion diversity of thought. Our various employee forums provide a platform to use their voice to foster an inclusive workplace. We became the first major media organisation to achieve B Corp status. We offer tools to help you prioritise your wellbeing including access to our employee benefits platform which provides tailored support for health and wellbeing. In addition, we also offer free yoga and pilates classes. These run alongside our corporate gym membership and cycle to work scheme. Our canteen has views overlooking the Regents Canal and caters for breakfast, lunch and dinner.

Learning and development:

We encourage personal and professional growth. Employees have access to a broad range of tools and solutions, and we are happy to support the pursuit of professional qualifications through vocational courses and apprenticeships.

We value honesty in your application. AI generated content must not be presented as your own work.

Guardian News and Media is proud to be a London Living wage employer. The minimum salary for any full-time role within the organisation is £30,000 per annum. Salary ranges are dependent on skills and experience.

The closing date for applications is Thursday 13th August 2026. All roles at the Guardian are open for everybody to apply. It is important to us that you feel supported and comfortable throughout your recruitment process, in order to perform your best. Please let us know if there are any changes we could make to help your application, this includes providing documents in accessible formats or personalising the process to better support your needs.

Please contact Anna Vipers on to discuss further so we can work with you to support you through your application.