Information Security Risk Analyst

In this role you will strengthen security risk management for a global asset manager. You’ll translate risk findings into practical actions, maintain the risk register, and support governance across security policies and regulatory requirements. You’ll work with Security Operations and Engineering to analyse KRIs and drive remediation. You’ll help ensure compliance with frameworks like ISO 27001 and NIST CSF, and communicate risk to senior stakeholders. This is a chance to shape the security posture in a fast-paced financial services environment.

• salary to 90k
• pension
• private medical insurance including 24 hour GP access
• enhanced parental leave policy
• 25 days annual leave
• training and development support

• Assess security risks across systems, projects, technology changes, AI tools and third-party suppliers; develop actionable risk treatment plans
• Maintain and own the Information Security Risk Register with clear ownership and remediation tracking
• Evaluate controls against ISO 27001 and NIST CSF; identify gaps and support maturity assessments
• Analyze monthly KRIs and threat data to identify trends and systemic weaknesses
• Prepare risk forum reports and reports for senior management; manage policy exceptions and risk acceptances
• Maintain security policies, standards and procedures; monitor regulatory requirements (FCA, DORA, GDPR) and support audits

• Experience as an Information Security Risk Analyst or similar
• Strong understanding of security risk assessment, control frameworks and remediation
• Familiarity with ISO 27001, NIST CSF and regulatory requirements (financial services)
• Experience assessing third-party security risk and maintaining risk registers
• Ability to translate security metrics into business risks and recommendations
• Comfort using AI in daily activities
• Strong communication skills with technical and senior stakeholders
• Proactive, analytical mindset with ability to manage multiple risks to completion
• Degree educated, 2.1 or above from a top-tier university

• strong communication
• proactive
• analytical
• ISO 27001
• NIST CSF
• risk assessment