About this role
Information Security Risk Analyst London / WFH to £90k
Are you an Information Security professional with experience in risk assessment, security governance and control assurance?
You could be progressing your career in an impactful role at a tech driven, global Asset Manager with multiple billions of dollars under management.
As an Information Security Risk Analyst you'll play a key role in implementing and strengthening security risk management, helping the business make informed decisions while maintaining robust security standards in a changing regulatory and technology landscape.
You'll assess security risks across systems, projects, technology changes, AI tools and third party suppliers, translating your findings into practical recommendations and actionable risk treatment plans. You'll maintain the Information Security Risk Register, ensuring risks have clear ownership, appropriate controls and effective remediation through to closure.
You'll evaluate security controls against recognised frameworks such as ISO 27001 and NIST CSF, identify gaps and support maturity assessments to benchmark the organisation's security posture. Working closely with Security Operations and Engineering, you'll analyse monthly key risk indicators (KRIs), using threat, vulnerability and incident data to identify trends, highlight systemic weaknesses and communicate business risk.
You'll also contribute to security governance, preparing reports for risk forums and senior management, managing policy exceptions and risk acceptances and tracking decisions and actions. You'll help maintain security policies, standards and procedures, monitor evolving regulatory requirements including FCA regulation, DORA and GDPR and support internal and external audits.
There's a hybrid work from home policy with three days in the London office per week where you'll join a supportive, diverse team environment with a large range of facilities.
About you
- You have experience in a similar Information Security Risk Analyst
- You have a strong understanding of security risk assessment, control frameworks and remediation
- You're familiar with ISO 27001, NIST CSF and relevant regulatory requirements, ideally within financial services
- You have experience assessing third party security risk and maintaining risk registers
- You can interpret security metrics and translate technical findings into clear business risks and recommendations
- Your comfortable using AI in your daily activities
- You have strong communication skills, with confidence engaging technical teams, suppliers and senior stakeholders
- You have a proactive, analytical approach, with the ability to manage multiple risks and drive actions through to completion
- You are degree educated, having achieved a 2.1 or above from a top tier university, e.g. Russel Group / Oxbridge
What's in it for you
- Salary to £90k
- Pension
- Private medical insurance including 24 hour GP access
- Enhanced parental leave policy
- 25 days annual leave
- Ongoing training and development and financial support for courses
*Apply now*to find out more about this Information Security Risk Analyst opportunity.
About cyber security & digital forensics roles for ex-police
Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.
See all cyber security & digital forensics jobs in London →Why this fits a police background — match score 81/100
- Risk & threat assessment
- Working to legislation & regulation
- Security operations
What cyber security & digital forensics roles pay ex-police
Advertised UK ranges, editorial estimates reviewed July 2026
| Digital forensics analyst | £32,000–£45,000 |
| DFIR consultant | £45,000–£65,000 |
| Senior forensics / IR specialist | £60,000–£80,000 |
| Threat-intelligence specialist | £55,000–£80,000 |