Information Security Analyst

Cyber UK; City of Edinburgh; Hybrid; GBP 40,000 - 60,000; Full time

Job summary

A financial services organization in Edinburgh is looking for an Information Security Analyst to enhance its security posture. You will work collaboratively across departments and with third-party partners, leading initiatives to improve risk management and security maturity. The ideal candidate has a strong understanding of information security risk management principles and will contribute to training and policy development, all in a fast-paced environment focused on security.

Qualifications

• Detail-oriented and proactive professional.
• Ability to translate technical insights into actionable outcomes.
• Experience in mentoring other team members.

Responsibilities

• Assess and document security control designs and operational effectiveness.
• Lead tabletop exercises and threat modelling sessions.
• Support and mentor other security team members.
• Develop and deliver security training and awareness initiatives.
• Assist with vendor risk assessments and intra-group risk reporting.
• Maintain structured reporting and audit trails.
• Engage with auditors, regulators, and internal stakeholders.
• Contribute to policy development.

Skills

Information security risk management

Strong understanding of ISMS principles

Job description

Information Security Analyst

Location: Edinburgh Hybrid
Type: Full-time | Permanent
Sector: Financial Services / Regulated Industry

How do we protect information at the organisational level? If this is a question you like to answer then this could be the role for you. We’re working with a forward-thinking financial services organisation that’s expanding its Information Security team with a new Information Security Analyst role. This is a fantastic opportunity to make a real impact in a collaborative, fast-paced environment where security is a top priority.

The Role

As an Information Security Analyst, you’ll play a key role in enhancing the organisation’s security posture. You’ll work across departments and with third-party partners to support risk management strategies, improve security maturity, and contribute to the development of policies, training, and awareness programs. This is a hands-on role where you’ll lead initiatives, support audits and regulatory engagements, and help shape how security is assessed and reported using frameworks like NIST CSF, CIS CSAT, ISO27001, and Cyber Essentials+.

Key Responsibilities

• Assess and document security control designs and operational effectiveness
• Lead tabletop exercises and threat modelling sessions
• Support and mentor other security team members
• Develop and deliver security training and awareness initiatives
• Assist with vendor risk assessments and intra-group risk reporting
• Maintain structured reporting and audit trails
• Engage with auditors, regulators, and internal stakeholders
• Contribute to policy development and oversight of critical outsource partners
• Collaborate with Security Operations and Application Security teams

About You

You’re a detail-oriented, proactive professional who thrives in a collaborative environment. You’re inquisitive, analytical, and comfortable translating technical insights into clear, actionable outcomes. You enjoy mentoring others and are confident working independently while knowing when to escalate or collaborate.

Skills & Experience

• Strong understanding of information security risk management and ISMS principles

Apply For Job