Information Security Analyst

Information Security Analyst – Financial Services – Up to £60k – Hybrid - London

Overview:

An exciting opportunity has arisen for an Information Security Analyst to join a global Financial Services company operating on a global scale across retail, healthcare and other sectors. In this role, you will be responsible for monitoring, assessing, and responding to security incidents and threats, ensuring compliance with security policies, and implementing measures to protect the organisation's data and IT infrastructure.

Role & Responsibilities:

• Monitor networks and systems for security breaches, intrusions, and abnormal system behavior
• Investigate security incidents, perform root cause analysis, and provide incident response support
• Conduct regular vulnerability assessments and penetration testing; assist in remediation efforts
• Maintain and manage SIEM (Security Information and Event Management) tools and log analysis
• Develop and enforce security policies, standards, and procedures
• Work with IT and development teams to implement secure system designs and configurations
• Support compliance initiatives (e.g., ISO 27001, NIST, GDPR, PCI-DSS) by assisting with audits and documentation
• Conduct security awareness training and phishing simulations for employees
• Keep up-to-date with the latest security trends, threats, and technology solutions

Essential Skills & Experience:

• Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent experience)
• 2+ years of experience in an information security or cybersecurity role
• Strong understanding of security principles, frameworks, and practices (e.g., CIA triad, defense in depth)
• Experience with SIEM tools, intrusion detection/prevention systems (IDS/IPS), firewalls, and endpoint protection
• Familiarity with vulnerability scanning tools (e.g., Nessus, Qualys) and remediation processes
• Knowledge of networking protocols, operating systems (Windows, Linux), and cloud platforms
• Excellent analytical, problem-solving, and communication skills
• Security certifications such as CompTIA Security+, SSCP, CEH, GSEC, or CISSP (or actively working toward one)
• Experience with cloud security in AWS, Azure, or GCP environments
• Knowledge of scripting or automation (e.g., Python, PowerShell) for security tasks
• Understanding of DevSecOps practices and secure SDLC

Package:

• £40-60k depending on relevant experience
• Hybrid working – 3 days in London office
• Opportunities for professional growth and certification support
• Collaborative and inclusive team environment