At a Glance
- Tasks: Protect Vitality's data by assessing security risks and providing practical advice.
- Company: Join a multi-award-winning insurance brand focused on health and happiness.
- Benefits: Enjoy competitive salary, bonus schemes, health insurance, and a generous pension plan.
- Other info: Be part of a diverse team that values your unique perspective and promotes career growth.
- Why this job: Make a real impact in information security while working flexibly in a supportive environment.
- Qualifications: Experience in information security and knowledge of ISO standards are essential.
The predicted salary is between 48234 - 58952 £ per year.
About The Role
Team – Information Security
Working Pattern: Hybrid – 2 days per week in the Vitality Bournemouth, London or Stockport Office. Full-time hours apply. We are happy to discuss flexible working!
Top 3 skills needed for this role:
- Proven security risk assessment
- Strong regulatory compliance knowledge
- Skilled stakeholder communication
What this role is all about
Help us keep Vitality secure, resilient and ready for what’s next. As an Information Security Analyst, you’ll play an important role in protecting our business and member data, identifying security risks and strengthening the controls that keep us secure. Working across teams and projects, you’ll provide practical security advice, support our Information Security Management System and help Vitality stay aligned with recognised security standards and regulatory requirements.
What you will be doing:
- Provide clear and practical information security advice to stakeholders across the business
- Support the development and continuous improvement of the Information Security Management System to maintain ISO 27001 certification
- Complete information security risk assessments across business processes, systems and projects, identifying appropriate mitigating controls
- Conduct internal audits against ISO 27001 requirements and produce clear, evidence-based audit reports
- Work with project managers to identify and address information security risks throughout the software development lifecycle
- Develop, implement and maintain information security policies, standards, procedures and processes
- Support the maturity of Data Loss Prevention, access management and security monitoring capabilities
- Complete security due diligence on third-party suppliers, including site visits where required
- Contribute to information security training, awareness activities and wider improvements to Vitality’s security posture
- Support the investigation and management of information security incidents and associated audit activity
What do you need to thrive?
- Experience working within an information security role
- Strong understanding of information security principles, data protection and regulatory compliance
- Experience completing risk assessments and business impact analyses
- Working knowledge of ISO 27001, ISO 27002, PCI DSS and other relevant security frameworks
- Experience developing and implementing information security policies and procedures
- Ability to conduct internal audits and produce clear audit reports
- Experience supporting projects throughout the software development lifecycle
- Understanding of information security monitoring tools and technical controls, including Data Loss Prevention and role-based access controls
- A professional qualification such as CISSP, CISA or CRISC, or the commitment to work towards one
So, what’s in it for you?
- Bonus Schemes – A bonus that regularly rewards you for your performance
- A pension of up to 12%– We will match your contributions up to 6% of your salary
- Our award-winning Vitality health insurance – With its own set of rewards and benefits
- Life Assurance – Four times annual salary
If you are successful… we’ll:
- Help you to be the healthiest you’ve ever been
- Create an environment that embraces you as you are and enables you to be your best self
- Give you flexibility on how, where and when you work
- Help you advance your career by playing you to your strengths
- Give you a voice to help our business grow and make Vitality a great place to be
- Give you the space to try, fail and learn
- Provide a healthy balance of challenge and support
- Recognise and reward you with a competitive salary and amazing benefits
- Be there for you when you need us
- Provide opportunities for you to be a force for good in society
We commit to all these things because we want you to feel that you belong, and are supported to be happy and healthy.
About Us
We’re incredibly proud to be recognised for the culture we've created — recently being named one of Glassdoor’s Best Places to Work 2026, and in 2024 we were delighted to be awarded Top 10 Places to Work in the Sunday Times Awards. Vitality is a multi-award-winning UK insurance brand, here to make the world a healthier, happier place. We’ve been a purpose and values-driven business from day 1- long before it became fashionable. Our core purpose is to make people healthier and enhance protect their lives. Vitality pioneered shared-value insurance. We incentivise people to live healthier longer lives – they benefit, our business benefits, and society benefits. We’re successful because we attract, develop, and retain the best people – and because we care. Plus, you get to join our 1.7+ million members with access to our unique health insurance and healthy living programme.
Diversity & Inclusion
At Vitality, we’re committed to diversity and inclusion because it’s good for our employees, for our business, and for society. We welcome applications from individuals of all backgrounds, experiences, and perspectives.
Vitality’s approach to sustainability
Vitality is a business that drives positive change. We reward people for making and sustaining healthier choices. But healthy people also need a healthy environment.
Information Security Analyst employer: Vitality
Vitality is an exceptional employer, offering a vibrant work culture that prioritises employee well-being and professional growth. With flexible working arrangements and a commitment to diversity and inclusion, employees are empowered to thrive in their roles while enjoying competitive benefits such as a generous pension scheme and award-winning health insurance. Join us in our London office and be part of a purpose-driven team dedicated to making a positive impact on society.
StudySmarter Expert Advice🤫
We think this is how you could land Information Security Analyst
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Vitality, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Vitality
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Vitality. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Information Security Analyst
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Vitality insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Vitality that you’re committed to staying ahead in the game.
How to prepare for a job interview at Vitality
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Vitality to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Vitality.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
