Lead Information Security Analyst

About this role

Lead Information Security Analyst – Financial Services

A leading bank are currently looking for a LeadInformation Security Analyst to join their team. This is a permanent role based in London on a hybrid basis (3 days per week) paying £80,000-£90,000 per annum plus package

Are you an experienced Information Security professional looking to take the next step in your career? Our client, a well-established international banking organisation, is seeking a Lead Information Security Analyst to play a key role in protecting critical business systems, strengthening cyber resilience, and driving continuous improvement across its Information Security Management System (ISMS).

This is an excellent opportunity for someone with strong technical security expertise, governance experience, and a passion for mentoring others within a collaborative and h regulated environment.

The Role

You will support the development and ongoing maintenance of the organisation's Information Security Management System (ISMS). You will provide expert guidance on cyber security risks, oversee security monitoring and incident response activities, and help ensure compliance with regulatory requirements and recognised security frameworks.

You will also provide technical leadership within the Information Security team, mentoring colleagues while working closely with internal stakeholders and Head Office to strengthen the organisation's overall security posture.

Key Responsibilities

• Support the development and continual improvement of the Information Security Management System (ISMS).
• Review existing security tools and architecture, identifying opportunities for enhancement.
• Lead security monitoring activities, including analysis of SIEM alerts, log management, threat detection, and Blue Team exercises.
• Support and lead cyber security incident response and simulation exercises.
• Mentor and provide technical guidance to Information Security Analysts.
• Analyse threat intelligence and vulnerability information, recommending effective remediation strategies.
• Conduct information security reviews and assurance activities to identify control improvements.
• Participate in enterprise-wide information asset and vendor risk assessments.
• Support internal and external audits and Head Office information security requirements.
• Assist with vulnerability management, penetration testing, and remediation prioritisation.
• Produce security reporting, management information, and track actions arising from audits, reviews, and incidents.
• Help develop and deliver Information Security awareness training across the business.
• Maintain and enhance Information Security policies, procedures, and documentation.
• Keep up to date with emerging cyber threats, technologies, and industry best practice.

About You

You'll be an experienced Information Security professional with strong technical knowledge and a proactive approach to risk management.

You'll ideally have

• 3+ years' experience in Information Security within a regulated or enterprise environment.
• Strong experience maintaining an Information Security Management System (ISMS).
• Knowledge of recognised security frameworks such as ISO 27001, NIST, or SOC 2.
• Experience leading security reviews and advising technical and business stakeholders.
• Up-to-date knowledge of cyber security operations, threat detection, and incident response.
• Experience with SIEM technologies and security monitoring.
• Knowledge of vulnerability management, penetration testing, and system hardening.
• Strong analytical, communication, and stakeholder management skills.

Desirable Experience

• CISSP, CISM, or equivalent Information Security certification.
• GIAC certifications such as GCDA or GCIH.
• Experience with Darktrace and Carbon Black.
• Knowledge of banking or financial services.
• Experience working within a regulated environment.
• Competitive salary and comprehensive benefits package.

If you're an experienced Information Security professional looking to make a real impact within a highly regulated environment, we'd love to hear from you.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.