Information Security Analyst – Governance & AI

About the role

This newly created position focuses on information security governance and the safe adoption of AI within a professional services organisation. You will work across risk, compliance and information protection, shaping security practices that support business growth and emerging technologies.

Key responsibilities

• Develop and maintain the organisation's information security governance framework.
• Conduct risk assessments, control reviews, gap analyses and support audit activities.
• Track security risks, remediation plans and drive control improvements.
• Lead configuration and continuous improvement of Microsoft Purview, including DLP, classification and information protection controls.
• Support supplier and third‑party security assurance activities.
• Contribute to security awareness, colleague engagement and AI security governance initiatives.

Required profile

• Experience in information security, governance, risk or compliance.
• Practical knowledge of Microsoft Purview and Microsoft 365 compliance capabilities.
• Familiarity with data classification, sensitivity labels, DLP and retention controls.
• Understanding of security frameworks such as ISO 27001, Cyber Essentials or NIST.
• Strong stakeholder management and communication skills.
• Methodical, organised and able to work both independently and collaboratively.

Required skills

• Microsoft Purview
• Microsoft 365 compliance
• Data classification
• Sensitivity labels
• Data Loss Prevention (DLP)
• Retention controls
• ISO 27001
• Cyber Essentials
• NIST
• AI security controls

What we offer

• Up to £35,000 per annum
• Full‑time permanent contract
• Hybrid working model (Glasgow office and remote)