Information Security Analyst

We are seeking a mid-level Governance, Risk and Compliance analyst, working in our Information Security Team, to enable us to continue to reduce Information Security risk, advance the security of our products, our data, our infrastructures, our people and protect our brand and reputation.

What you’ll be doing:

The suitable candidate will be interested in Information Security, risk and be able to develop working relationships across multiple functions, including Engineering, Product, Commercial, Legal etc.

• Work directly alongside and for the Head of Information Security Governance, Risk and Compliance on maturing Information Security risk, working closely alongside our Risk and Internal Audit teams.
• Help improve third-party and supply chain risk management, including requirements from customers as well as vendor due diligence.
• Mature our policies, our public-facing security documentation and our Information Security White Paper.
• Be integral to building our maturity in relevant areas of compliance, including SOC 2, ISO27001 and PCI DSS.
• Help us automate our way out of manual processes.
• Be a champion for all things Information Security risk across the business.

Who you are:

• Experience in the management of compliance frameworks such as SOC 2, ISO27001 and PCI DSS.
• Familiarly with the risk management processes, including risk identification, assessment and mitigation.
• Understanding of third-party risk management and vendor security due diligence.
• Experience developing and managing policies and procedures.
• A technologist who can help us ‘automate the boring stuff’.
• An interest for security and risk in the internet and digital economy.
• A pragmatist who knows how to balance risk vs pace of innovation.
• A reasonable understanding of the risks of Cloud environments.

What’s in it for you:

• A range of flexible working options to dedicate time to what matters to you
• Competitive compensation package + bonus
• 25 days holiday per year, increasing to 28 days after 2 years of employment
• Two (paid) volunteering days a year to spend your time giving back to the causes that matter to you and your community
• Rich learning and development opportunities are supported through the Trustpilot Academy, LinkedIn Learning, and Blinkist
• Pension and life insurance Health cash plan, online GP, 24/7 Employee Assistance PlanFull access to Headspace, a popular mindfulness app to promote positive mental health
• Paid parental leave
• Season ticket loan and a cycle-to-work scheme
• Central office location complete with all the snacks and refreshments you can ask for
• Regular opportunities to connect and get to know your fellow Trusties, including company-wide celebrations and events, ERG activities, and team socials
• Access to over 4,000 deals and discounts on things like travel, electronics, fashion, fitness, cinema discounts, and more.

Still not sure?

We want to be a part of creating a more diverse, equitable, and inclusive world of work for all. We’re excited to hear about your experiences as well as how you will contribute to our working culture. So, even if you don’t feel you don’t meet all the requirements, we’d still really like to hear from you!

#LI-MF1