Information Security Analyst

In this role you will support government, defence and commercial clients by assessing and strengthening information security. You will work within a consultancy, evaluating controls, risks and compliance against recognised standards. You will translate findings into practical recommendations and help implement improvements with client stakeholders. The opportunity spans a varied client portfolio, contributing to audits, risk management and regulatory alignment. This role offers remote work with occasional travel and a chance to deepen consultancy experience in security and compliance.

• Conduct information security assessments against recognised frameworks and standards
• Support audit and assurance activities aligned with ISO 27001 and the NIST Cybersecurity Framework
• Identify information security risks, control gaps and remediation areas
• Assist with risk assessments, compliance reviews and practical recommendations
• Review security documentation and provide evidence-based findings
• Support implementation and continuous improvement of information security processes
• Engage with client stakeholders to communicate findings and improve security posture

• Active SC clearance
• Experience in cyber security or information security consultancy
• Experience conducting information security assessments, audits, risk reviews or compliance activities
• Knowledge of ISO 27001 and/or the NIST Cybersecurity Framework
• Understanding of information security controls, risk management and governance principles
• Strong analytical skills and ability to communicate findings clearly
• Comfortable engaging with clients across different organisational environments

• strong analytical skills
• clear communication
• client-facing
• ISO 27001
• NIST Cybersecurity Framework
• information security assessments