Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Safeguard information security and support compliance efforts in a collaborative team.
- Company: Join a leading professional services firm making waves in legal and IT consulting.
- Benefits: Enjoy hybrid work options, competitive pay, and opportunities for professional growth.
- Why this job: Be part of a mission-driven team enhancing cybersecurity while developing your skills.
- Qualifications: Strong background in information security, compliance, and relevant certifications preferred.
- Other info: This role offers a chance to lead initiatives and make a real impact.
The predicted salary is between 36000 - 60000 £ per year.
Get AI-powered advice on this job and more exclusive features.
Locke and McCloud provided pay range
This range is provided by Locke and McCloud. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.
Base pay range
Information Security Analyst
Location: Bristol (Hybrid, 3 days in-office)
Join a leading professional services firm as a Information Security Analyst, where you\’ll play a key role in safeguarding the organisation\’s information security posture. Working in a growing, collaborative team, you\’ll contribute to the firm\’s ISMS expansion and act as deputy to the Information Security Manager when needed.
Key Responsibilities & Requirements:
- Lead and support the implementation and management of the ISO 27001 framework and related compliance efforts.
- Conduct risk assessments, third-party/vendor risk management, and business continuity planning.
- Develop, update, and enforce cybersecurity policies, procedures, and security documentation.
- Perform incident response planning and investigations, working closely with technical and non-technical teams.
- Deliver executive-level reporting on security risks, compliance KPIs, and audit outcomes.
- Provide training and awareness initiatives to enhance security across the organisation.
- Work collaboratively with stakeholders to meet compliance and regulatory objectives.
What We’re Looking For:
- Strong experience in information security, with a focus on compliance and risk management.
- Expertise in ISO 27001, GDPR, and incident response.
- Exceptional attention to detail, analytical mindset, and proactive approach.
- Excellent communication skills to bridge technical and non-technical audiences.
- Relevant certifications (e.g., CISSP, CISM, ISO27001 Lead Auditor) are a plus.
Seniority level
Mid-Senior level
Employment type
Full-time
Job function
Analyst and Information Technology
Industries
Legal Services and IT Services and IT Consulting
#J-18808-Ljbffr
Contact Detail:
Locke and McCloud Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Information Security Analyst
✨Tip Number 1
Network with professionals in the information security field, especially those who have experience with ISO 27001 and compliance. Attend industry events or webinars to connect with potential colleagues and learn about their experiences.
✨Tip Number 2
Familiarise yourself with the latest trends and challenges in information security, particularly around GDPR and incident response. This knowledge will help you engage in meaningful conversations during interviews and demonstrate your proactive approach.
✨Tip Number 3
Consider joining relevant online forums or communities where information security professionals share insights and advice. Engaging in discussions can enhance your understanding and may even lead to job referrals.
✨Tip Number 4
Prepare to discuss specific examples of how you've contributed to risk management and compliance efforts in previous roles. Being able to articulate your hands-on experience will set you apart from other candidates.
We think you need these skills to ace Information Security Analyst
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights your experience in information security, particularly focusing on compliance and risk management. Include specific examples of your work with ISO 27001, GDPR, and incident response.
Craft a Compelling Cover Letter: In your cover letter, express your enthusiasm for the role and the company. Mention how your skills align with the key responsibilities listed in the job description, such as leading the implementation of the ISO 27001 framework.
Showcase Relevant Certifications: If you have relevant certifications like CISSP, CISM, or ISO27001 Lead Auditor, make sure to mention them prominently in your application. This can set you apart from other candidates.
Prepare for Technical Questions: Anticipate technical questions related to information security and compliance during the interview process. Be ready to discuss your experience with risk assessments and incident response planning.
How to prepare for a job interview at Locke and McCloud
✨Showcase Your Compliance Knowledge
Make sure to highlight your understanding of ISO 27001, GDPR, and other relevant compliance frameworks. Be prepared to discuss how you've implemented these standards in previous roles, as this will demonstrate your expertise and suitability for the position.
✨Prepare for Scenario-Based Questions
Expect questions that assess your problem-solving skills in real-world situations. Think of examples where you've conducted risk assessments or managed incidents, and be ready to explain your thought process and the outcomes.
✨Communicate Clearly with All Audiences
Since the role requires bridging technical and non-technical teams, practice explaining complex security concepts in simple terms. This will show your ability to communicate effectively across different levels of the organisation.
✨Demonstrate a Proactive Approach
Employers value candidates who take initiative. Share examples of how you've proactively identified security risks or improved processes in your past roles. This will illustrate your analytical mindset and commitment to enhancing information security.
