Information Security Analyst (Cybersecurity)

Location: London or Birmingham; attend the chosen office two days per week and work remotely for the remainder. Applicants must have the right to work in the UK without employer sponsorship.

What you will do

• Maintain vulnerability-scanning, endpoint-security, and network-monitoring controls and tools.
• Investigate security alerts and coordinate incident response through containment, remediation, and recovery.
• Run vulnerability assessments, coordinate penetration tests, and track findings through closure.
• Assess technical security risks, agree remediation plans, and escalate serious risks.
• Work with control owners to implement security controls and collect evidence of their effectiveness.
• Define security requirements for projects, infrastructure changes, and new technologies.

Requirements

• Previous experience in the London Market insurance sector, such as with an insurer, broker, managing agent, or another organisation operating in the London Market.
• Hands-on experience in security operations, cyber defence, or technical information security.
• Experience investigating security alerts or incidents and coordinating responses.
• Experience managing vulnerabilities from identification through remediation.
• Ability to investigate technical issues and clearly explain risks to technical and non-technical stakeholders.
• Right to work in the UK without employer sponsorship.

Nice to have

• Experience with Tenable or another vulnerability-scanning platform.
• Experience with endpoint-security or network-monitoring tools.
• Experience coordinating penetration tests.
• Experience supporting audits, risk reviews, or control-assurance activities.

Hiring process

• Initial technical interview.
• Final technical and stakeholder interview.
• HR conversation.