Information Security Risk Analyst

In this role you will strengthen security risk management for a tech-driven, global asset manager. You’ll assess risks across systems, projects, AI tools and vendors, translating findings into actionable risk treatments. You’ll maintain the risk register, ensure ownership and remediation, and support governance with senior stakeholders. You’ll work with Security Operations and Engineering to spot trends via KRIs and align on regulatory and framework requirements, shaping the company’s security posture.

• Salary to 90k
• Pension
• Private medical insurance including 24 hour GP access
• Enhanced parental leave policy
• 25 days annual leave
• Ongoing training and development and financial support for courses

• Assess security risks across systems, projects and third-party suppliers
• Maintain and own the Information Security Risk Register with clear ownership and remediation tracking
• Evaluate controls against ISO 27001 and NIST CSF; support maturity assessments
• Analyse KRIs and incident data to identify trends and systemic weaknesses
• Prepare governance reports for risk forums and senior management; manage policy exceptions and risk acceptances
• Monitor regulatory requirements (FCA, DORA, GDPR) and support audits and controls
• Collaborate with Security Operations and Engineering to translate findings into business risk and actionable recommendations

• Experience in information security risk assessment and governance
• Familiarity with ISO 27001 and NIST CSF; regulatory knowledge in financial services
• Experience assessing third-party security risk and maintaining risk registers
• Ability to translate technical findings into business risk and recommendations
• Strong stakeholder communication skills; comfortable engaging with suppliers and senior stakeholders
• Proactive, analytical approach with ability to manage multiple risks to closure
• Degree educated with 2.1 or above from a top-tier university

• Strong communication
• Analytical mindset
• Proactive problem-solving
• ISO 27001
• NIST CSF
• Security risk assessment