IT Security Analyst – Information Security & Assurance
Salary: Up to £45,000
Location: Remote / Home-Based (UK) with occasional office travel
Contract: Permanent, Full-Time
An exciting opportunity to develop your career in Information Security!
I'm currently working with an established and growing technology organisation looking to appoint a Senior IT Security Analyst to join its wider Security Operations function.
This is a fantastic opportunity for someone with a background in Information Security, Governance, Risk or Compliance who is looking to take greater ownership of security assurance, audits and continuous improvement.
Working closely with the Security Operations Manager, you'll play an important role in strengthening the organisation's security posture, supporting ISO 27001 compliance and acting as a key point of contact for security assurance activities.
What you'll be doing
- Supporting and coordinating internal and external security audits, particularly around ISO 27001 and other recognised security frameworks.
- Taking ownership of day-to-day information security assurance activities, including evidence gathering, control reviews and audit preparation.
- Supporting the ongoing maintenance and improvement of the organisation's Information Security Management System (ISMS).
- Managing customer security assurance requests, due diligence questionnaires and compliance-related queries.
- Overseeing security assurance tooling, automated workflows, task allocation and remediation tracking.
- Acting as an escalation point for information security queries, providing advice and guidance to internal stakeholders.
- Working closely with the Security Operations Manager to identify risks, improve processes and strengthen security controls.
- Supporting wider security operations, vulnerability management and continuous improvement initiatives.
What we're looking for
- Approximately 2-5 years' experience within Information Security, Cyber Security, IT Security or GRC.
- Good working knowledge of ISO 27001, security frameworks, audit processes and security controls.
- Experience supporting security audits, compliance activities or information security assurance.
- Understanding of security tooling, risk management and governance processes.
- Strong communication skills, with the confidence to engage with technical and non-technical stakeholders.
- A proactive, organised approach, with the ability to take ownership of tasks and manage competing priorities.
- Ideally, experience within a technology, software, SaaS or similar business environment.
Experience with Cyber Essentials Plus, customer assurance questionnaires, security automation platforms or vulnerability management tools would be advantageous.
Why consider this opportunity?
- Up to £45,000 salary
- Predominantly remote working with occasional office travel
- Opportunity to take real ownership of security assurance and governance activities
- Work closely with experienced security leadership
- Exposure to a broad range of security frameworks, tools and business functions
- Excellent opportunity to develop your career within a growing technology organisation
If you're currently working in Information Security, Security Assurance or GRC and are looking for an opportunity to develop your experience and take on greater responsibility, I'd love to hear from you!
#J-18808-Ljbffr
Information Technology Security Analyst employer: Sanderson
Join a forward-thinking team as a DevOps Engineer, where you'll thrive in a fully remote environment that champions innovation and collaboration. With a focus on employee growth, you'll gain invaluable experience working with cutting-edge cloud technologies and automation tools, all while contributing to critical AWS-hosted platforms. Our supportive work culture encourages continuous learning and development, making this an ideal opportunity for those looking to advance their careers in a dynamic setting.
