Information Security Analyst

About the role

We are looking for a curious and hands‑on Information Security Analyst to help keep FundApps secure, resilient and trustworthy as we continue to grow. The role spans security operations, access reviews, vulnerability management, supplier assurance, security awareness, audits, incident response and the day‑to‑day running of our Information Security Management System.

Key responsibilities

• Take end‑to‑end ownership of ISO 27001 and SOC 2 controls, from evidence collection to audit preparation.
• Partner with Legal and Revenue to answer security questionnaires and RFPs for clients and prospects.
• Plan and execute penetration‑testing campaigns and manage vulnerability remediation.
• Run annual business continuity planning exercises and conduct recurring access reviews.
• Monitor security alerts, incidents and internal events, escalating and closing investigations.

Required profile

• Curious and hands‑on, willing to dig into details and ask uncomfortable questions.
• Comfortable with ambiguity, change and learning new processes quickly.
• Transparent communicator who provides regular updates and seeks feedback.
• Proactive attitude to improve workflows, automate tasks and raise the security bar.

Required skills

• ISO 27001 and SOC 2 control frameworks.
• Penetration testing and vulnerability management.
• Business continuity planning and access‑review processes.
• Security incident monitoring and response.

What we offer

• Hybrid working with three days onsite during the first six months, then at least two days per week.
• £60,000‑£65,000 salary, private health insurance, life insurance and a matched pension up to 10%.
• £1,000 annual learning budget, unlimited professional‑development leave and peer‑led learning sessions.
• 25 days holiday plus additional days for service milestones and parental leave.