Information Security Analyst – Product Assurance

About the role

The Information Security Analyst – Product Assurance will join the Data Governance and Information Security team, supporting the Product Assurance function. You will help engineering and development teams embed security throughout the product lifecycle, continuously reviewing the security posture against emerging threats and business goals.

Key responsibilities

• Work collaboratively with engineering families in an agile, flexible manner while maintaining appropriate governance.
• Ensure security is built‑in by design and that products protect client and employee data.
• Define and verify Security Non‑Functional Requirements for each project before release.
• Liaise with the Information Security Testing team to coordinate ethical hacking, code reviews, application and infrastructure scanning.
• Provide end‑to‑end assurance of IT products across the group, issuing approvals where required.
• Translate technical risk into clear, business‑friendly language for stakeholders.
• Identify, assess and monitor strategic, operational and emerging risks affecting cloud and data environments.
• Develop and maintain senior stakeholder relationships to drive risk‑based decision making.

Required profile

• Minimum 4 years of experience in information or cyber security.
• Demonstrated commitment to continuous professional development, with recent industry‑recognised certifications.
• Strong understanding of security technologies within monolithic and micro‑service architectures.
• Excellent stakeholder management and communication skills.

Required skills

• Security testing and ethical hacking.
• Code review techniques.
• Application scanning.
• Infrastructure scanning.
• Knowledge of monolithic and micro‑service architectures.