Information Security Risk Analyst
Summary
Assess and manage IT and security risks for a financial-services firm, translating technical issues into business decisions and maintaining ISO 27001 controls.
Do you want to move beyond tracking risk and start influencing how it’s managed across a business?
Are you confident translating technical security risks into clear, commercial decisions for stakeholders?
We’re looking for an Information Security Risk Analyst to support the identification, assessment, and management of security and technology risk across the business.
We’re looking for an Information Security Risk Analyst to support the identification, assessment, and management of security and technology risk across the business.
You will play a key role in maintaining the risk framework, working closely with stakeholders across IT, security, and the wider business to ensure risks are understood, quantified, and actively managed.
- Conduct risk assessments across technology systems, projects, and third-party suppliers
- Maintain and update the information security risk register, tracking remediation activity
- Assess the design and effectiveness of security controls, identifying gaps and improvements
- Perform control testing and validate key risk indicators
- Support internal and external audits
- Monitor emerging threats and recommend appropriate mitigation actions
- Work with stakeholders across IT and business teams to manage risk effectively
- Produce clear, concise reporting for both technical and non-technical audiences
- Contribute to the continual improvement of the ISMS
- Support vulnerability management activities
- Experience in information security or technology risk
- Strong understanding of risk assessment approaches and frameworks
- Knowledge of standards such as ISO 27001 or NIST
- Strong analytical and problem-solving capability
- Ability to communicate complex risks in clear, business-facing language
- Experience working with risk tools or systems
Desirable
- Experience within financial services or a regulated environment
- Relevant certifications (CRISC, CISM, CISSP, ISO 27001)
- Experience with reporting tools such as Power BI
You'll be based at the Benchmark Head Office, within our Broadlands Business Campus near Horsham in West Sussex but will need to be present across our other offices, including the main Schroders headquarters in London. It has high standards and international reputation, without being in the city: a big, countryside campus means life will feel a little different.
We support our offices by using cutting edge software and hardware and our spacious campus facilities mean there's a great working environment for the team. With an on-site restaurant, coffee shop and gym, our campus has much to offer. And commuters can relax on our dedicated regular shuttle bus to and from Horsham’s main line train station.