Information Security Risk Analyst

1 month ago


Camden Area, United Kingdom Brown & Brown Europe Full time
Information Security Risk AnalystnLocation:

Hybrid - LondonnPackage:

Negotiable + Benefits

The Information Security Risk Analyst III at Brown & Brown is responsible for analysing information security controls both within our organisation and with third-party entities. This analysis aims to identify and assess associated information security risks, and effectively communicate these findings to the business stakeholders. This role requires a thorough understanding of information security principles and practices, as well as the ability to evaluate complex systems and processes. The Information Security Risk Analyst III plays a crucial role in safeguarding our organisation's information assets and maintaining a strong security posture.

The day to day:nresearch and analysis to handle inbound cybersecurity inquiries from company’s third parties.nresearch and analysis related to vetting new or potentially new third parties.nrecommendations for communicating identified security risks of new or potentially new third parties.ntrack, monitor, and investigate potential information security incidents reported by company’s third parties.nand analyse third party risk including documentation.nguidance in identifying, evaluating, and developing processes and procedures that are effective; meet information security standards and requirements, and follow information security policies and regulations.nreporting and analysis to monitor and communicate information security risk activitiesnbest practices and recommend how to improve current practices and monitoring.ncomplex inquiries from business partners and third parties (e.g., RFPs, Information Security questionnaires, Contract reviews, etc.).nsmall to medium Information Security Risk Management project initiatives.nand maintain dashboards, reports, metrics, and trending data related to information security.na strong understanding of information security fundamentalsnworking with ticketing systems (ex. Remedy, Service Now)nto assess information security controls based on cybersecurity principles and tenets. (e.g., CIS CSC, NIST SP 800-53, Cybersecurity Framework, etc.).nto identify cybersecurity and privacy issues that stem from connections with internal and external

About you:nDegree (Cyber security or related field), relative Information Security certification, and extensive related experience.nInformation Systems Security Professional (CISSP), or related certification.nand understanding of controls related to COBIT, HITRUST, SOX, PCI, HIPAA, and other regulations.nto review Service and Organization Controls (SOC) reports to confirm expected business and partner controls are implemented.nof risk management processes (e.g., methods for assessing and mitigating risk).nof laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.nof cybersecurity and privacy principles.nof organisation's enterprise information security architecture.nof Security Assessment and Authorization process.nof cybersecurity and privacy principles used to manage risks related to the use, processing, storage, and transmission of information or data.nof vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).nof cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

The rewards:nnegotiable basic salary and all the normal benefits you’d expect (Holiday, company pension etc.)ncollaborative, open and honest environment that is designed to deliver the best outcomes to our clients and staffnflexible working methodology to enable you to be where you need to be, if you don’t need to be in an office then don’t, if you want to be in an office your welcome to use one.nenvironment built around supporting and developing our staff with funding available for relevant professional qualifications.



  • London Area, United Kingdom Brown & Brown Europe Full time

    Information Security Risk AnalystLocation: Hybrid - London Package: Negotiable + BenefitsThe Information Security Risk Analyst III at Brown & Brown is responsible for analysing information security controls both within our organisation and with third-party entities. This analysis aims to identify and assess associated information security risks, and...


  • London Area, United Kingdom Brown & Brown Europe Full time

    Information Security Risk AnalystLocation: Hybrid - London Package: Negotiable + BenefitsThe Information Security Risk Analyst III at Brown & Brown is responsible for analysing information security controls both within our organisation and with third-party entities. This analysis aims to identify and assess associated information security risks, and...


  • London Area, United Kingdom Brown & Brown Europe Full time

    Information Security Risk Analyst Location: Hybrid - London Package: Negotiable + Benefits The Information Security Risk Analyst III at Brown & Brown is responsible for analysing information security controls both within our organisation and with third-party entities. This analysis aims to identify and assess associated information security risks, and...


  • London Area, United Kingdom Brown & Brown Europe Full time

    Information Security Risk AnalystLocation: Hybrid - London Package: Negotiable + BenefitsThe Information Security Risk Analyst III at Brown & Brown is responsible for analysing information security controls both within our organisation and with third-party entities. This analysis aims to identify and assess associated information security risks, and...


  • London Area, United Kingdom Brown & Brown Europe Full time

    Information Security Risk AnalystLocation: Hybrid - London Package: Negotiable + BenefitsThe Information Security Risk Analyst III at Brown & Brown is responsible for analysing information security controls both within our organisation and with third-party entities. This analysis aims to identify and assess associated information security risks, and...


  • London Area, United Kingdom Brown & Brown Europe Full time

    Information Security Risk Analyst Location: Hybrid - London Package: Negotiable + Benefits The Information Security Risk Analyst III at Brown & Brown is responsible for analysing information security controls both within our organisation and with third-party entities. This analysis aims to identify and assess associated information security risks, and...


  • Camden Area, United Kingdom Stack Digital Full time

    Job Title:Information Security AnalystnWork Arrangement:Hybrid ( 2 to 3 days)nLocation:RBC Europe Limited, 100 Bishopsgate, London, EC2N 4AAnRate Payable to Contractors:£350 - £400 per daynDuration of Assignment:6 monthsRole Description:nThe Information Security Analyst role at RBC BlueBay Asset Management involves providing expert advice and support on...


  • Camden Area, United Kingdom Stack Digital Full time

    Job Title:Information Security AnalystnWork Arrangement:Hybrid ( 2 to 3 days)nLocation:RBC Europe Limited, 100 Bishopsgate, London, EC2N 4AAnRate Payable to Contractors:£350 - £400 per daynDuration of Assignment:6 monthsRole Description:nThe Information Security Analyst role at RBC BlueBay Asset Management involves providing expert advice and support on...


  • Camden Area, Greater London, United Kingdom Stack Digital Full time

    Job Title:Information Security AnalystnWork Arrangement:Hybrid ( 2 to 3 days)nLocation:RBC Europe Limited, 100 Bishopsgate, London, EC2N 4AAnRate Payable to Contractors:£350 - £400 per daynDuration of Assignment:6 monthsRole Description:nThe Information Security Analyst role at RBC BlueBay Asset Management involves providing expert advice and support on...

  • Information Security

    4 weeks ago


    Camden Area, United Kingdom Commerzbank AG Full time

    A leading corporate banking and capital markets organisation is seeking an Information Security (Senior Analyst) to join the team in London.Main Purpose of the rolenSubject matter expert enabling the Information Security function to deliver high quality consultancy, risk reduction and assurance services addressing the Information Security needs of the...

  • Information Security

    1 month ago


    Camden Area, United Kingdom Commerzbank AG Full time

    A leading corporate banking and capital markets organisation is seeking an Information Security (Senior Analyst) to join the team in London.Main Purpose of the rolenSubject matter expert enabling the Information Security function to deliver high quality consultancy, risk reduction and assurance services addressing the Information Security needs of the...


  • Camden Area, Greater London, United Kingdom Oliver Bernard Full time

    Information Security Analyst - Splunk - £60KOur client is a leading Software Engineering and IT Consultancy.Offering excellent remote and hybrid working flexibility (based in London), they're looking for a Security Engineer / Cyber Security Analyst with good experience of monitoring and Splunk to join them.You'll have the chance to work directly with...


  • London Area, United Kingdom KDR Talent Solutions Full time

    Information Security Analyst | Outside IR35 | £500-£650 a day | 6 Months | Hybrid 2-3 days a week central LondonKDR are working with a leading Insurance client who are looking for a Information Security Analyst (6 month contract) who can take the lead on a specific audit action with a deadline for the end of 2024.This role is focused on a set of particular...


  • London Area, United Kingdom KDR Talent Solutions Full time

    Information Security Analyst | Outside IR35 | £500-£650 a day | 6 Months | Hybrid 2-3 days a week central London KDR are working with a leading Insurance client who are looking for a Information Security Analyst (6 month contract) who can take the lead on a specific audit action with a deadline for the end of 2024. This role is focused on a set of...


  • London Area, United Kingdom KDR Talent Solutions Full time

    Information Security Analyst | Outside IR35 | £500-£650 a day | 6 Months | Hybrid 2-3 days a week central LondonKDR are working with a leading Insurance client who are looking for a Information Security Analyst (6 month contract) who can take the lead on a specific audit action with a deadline for the end of 2024.This role is focused on a set of particular...

  • Information Security

    2 weeks ago


    Camden Area, Greater London, United Kingdom Commerzbank AG Full time

    A leading corporate banking and capital markets organisation is seeking an Information Security (Senior Analyst) to join the team in London.Main Purpose of the rolenSubject matter expert enabling the Information Security function to deliver high quality consultancy, risk reduction and assurance services addressing the Information Security needs of the...


  • Camden Area, United Kingdom EOS Risk Group Full time

    Company DescriptionnEOS Risk Group is a UK-based corporate and private client security risk and crisis management practice. We provide proactive risk mitigation strategies customized to client requirements, supported by our team of analysts, consultants, and accredited 24/7/365 Security Operations and Crisis Response Centre. Our portfolio includes a holistic...


  • Camden Area, United Kingdom EOS Risk Group Full time

    Company DescriptionnEOS Risk Group is a UK-based corporate and private client security risk and crisis management practice. We provide proactive risk mitigation strategies customized to client requirements, supported by our team of analysts, consultants, and accredited 24/7/365 Security Operations and Crisis Response Centre. Our portfolio includes a holistic...


  • London Area, United Kingdom La Fosse Full time

    Information Security GRC Analyst£65,000+Bonus+Benefits London/Hybrid In your role as Information Security GRC Analyst, you will evaluate IT and cyber risks and carry out risk management tasks. Additionally, the position will help advance the maturity of cyber security by enhancing the procedures required to safeguard our clients from online attacks. To...


  • London Area, United Kingdom La Fosse Full time

    Information Security GRC Analyst £65,000+Bonus+Benefits London/Hybrid In your role as Information Security GRC Analyst, you will evaluate IT and cyber risks and carry out risk management tasks. Additionally, the position will help advance the maturity of cyber security by enhancing the procedures required to safeguard our clients from online attacks. To...