InfoSec Analyst

About This Opportunity

We are representing a confidential technology scale-up based in the United Kingdom. Our client is a fully remote organisation with a global team operating across multiple countries. They are currently seeking an InfoSec Analyst to support their growing information security and privacy operations.

This is a fully remote position based in the United Kingdom.

Responsibilities

As InfoSec Analyst, you will support day-to-day information security and privacy operations, including:

• Maintaining security, privacy and compliance documentation
• Tracking security and privacy actions, control improvements and remediation activities
• Maintaining registers including risks, issues, actions, policies, vendors, assets, data processing activities and control evidence
• Coordinating updates between internal teams to ensure agreed actions are progressed
• Preparing security and privacy reports, summaries and updates for internal stakeholders
• Supporting internal and external compliance activities, including ISO 27001, SOC 2, GDPR and client assurance requirements
• Assisting with evidence gathering for audits, assessments and control reviews
• Maintaining audit trackers, evidence folders and compliance records
• Supporting the review and update of information security and privacy policies
• Administering security and privacy training and ensuring 100% completion rates across the business
• Supporting the development of awareness content, reminders, newsletters, FAQs and guidance
• Assisting with privacy records maintenance, including data processing registers and related documentation
• Supporting completion of client security and privacy questionnaires, RFP responses and due diligence requests
• Assisting with supplier due diligence questionnaires and evidence collection
• Supporting security and privacy incident logging, tracking and documentation
• Day-to-day execution of access controls and supporting access review processes

What We're Looking For

Essential Skills and Experience:

• Experience in information security, privacy, compliance, IT, risk, audit, operations or a related field
• Working knowledge of information security and privacy principles
• Awareness of GDPR, ISO 27001, SOC 2 or similar frameworks
• Ability to maintain trackers, registers, documentation and evidence records
• Strong written and verbal communication skills
• Ability to write clear guidance, summaries and user-facing content
• Strong organisational skills and attention to detail
• Ability to manage multiple tasks and deadlines
• Confidence working with stakeholders across different business functions
• Practical problem-solving approach
• Comfortable using collaboration tools, document repositories and workflow trackers

Desirable Skills and Experience:

• Exposure to ISO 27001, SOC 2, GDPR or other compliance environments
• Experience supporting audits, assessments or evidence collection
• Familiarity with security awareness or training activities
• Experience supporting client security questionnaires or RFP responses
• Exposure to vendor risk management or supplier due diligence
• Familiarity with GRC tools or compliance platforms
• Basic understanding of access management, MFA, endpoint protection and cloud security principles
• Relevant certification or willingness to work towards one (ISO 27001 Foundation, CompTIA Security+, CIPP/E, CIPM, ITIL Foundation, SOC 2 or audit-related training)

Personal Attributes:

• Takes ownership of tasks and follows through
• Communicates clearly and professionally
• Can organise information, actions and evidence in a structured way
• Strong attention to detail
• Can explain security and privacy topics in simple, practical terms
• Curious and willing to learn
• Understands when to escalate issues
• Brings a pragmatic and positive approach
• Comfortable operating in a fast-moving scale-up environment

How We Work With You

When you apply through Get A Job.ai, our talent team will review your qualifications and conduct an initial screening. If there's a strong match, we'll submit your profile to our client for their consideration. Please note that you should not contact the client directly—all communication and coordination will be managed through our recruiting team to ensure the best experience for everyone involved.

Pay

Compensation details will be discussed with qualified candidates during the screening process.

Equal Opportunity: Get A Job.ai is committed to inclusive hiring practices. We welcome applications from candidates of all backgrounds and work to ensure fair consideration throughout our recruitment process.