About this role
We’re looking for an Information Security GRC Analyst to help strengthen our approach to information and cyber security across our Retirement Retail and Investment business areas. Working collaboratively with technology teams and business stakeholders, you’ll support the effective management of security risks and controls, drawing on recognised frameworks including ISO 27001 and NIST.
This is an excellent opportunity for someone who enjoys analysing complex information, developing practical solutions and contributing to a supportive and inclusive team. You don’t need to meet every requirement listed below. If you have relevant transferable skills and are motivated to develop your career in information security, we’d love to hear from you.
What you'll be doing:
Interpreting security policies, standards and control requirements and translating them into practical architecture patterns and solution designsAdvising project managers, developers and other stakeholders on security controls and good practiceMonitoring current and emerging security risks and recommending proportionate solutionsSupporting the assessment of vulnerabilities identified through application and infrastructure security scansCollaborating with technical teams to review findings, compensating controls and risk ratingsEvaluating third-party suppliers’ security maturity and supporting due diligence, tender and contract reviewsReviewing system and solution configurations, identifying security issues and recommending improvementsSupporting the scoping of penetration tests and assessing and documenting the resulting findingsWho we're looking for:
An understanding of information security principles and controls, including areas such as encryption, identity and access management and security information and event managementExperience gained within an IT, technology, information security, risk or business-focused environmentStrong analytical and judgement skills, with the ability to assess information and recommend practical solutionsClear written and verbal communication skills, with confidence working collaboratively with a range of stakeholdersGood organisational skills, including the ability to prioritise work, manage deadlines and use time effectivelyExperience of report writing, producing metrics, risk management or security engineering and design would be beneficialAn adaptable and creative approach, with curiosity and a willingness to learn new technologies and solutionsA relevant degree or equivalent practical experience in computer science, IT, business or a related disciplineWhatever your role, we reward performance and behaviour with a package that looks after all the things that are important to you. Here are some of the benefits we offer:
The opportunity to participate in our annual, performance -related bonus plan and valuable share schemesGenerous pension contributionLife assuranceHealthcare Plan (permanent employees only)At least 25 days holiday, plus public holidays, 26 days after 2 years’ service. There’s also the option to buy and sell holidayCompetitive family leaveParticipate in our electric car scheme, which offers employees the option to hire a brand-new electric car through tax efficient salary sacrifice (permanent employees only)There are many discounts we offer – both for our own products and at a range of high street stores and onlineWe’re creating net‑zero carbon workplaces by 2030 by investing in our sustainable, modern offices across the UK, all designed to bring people together and elevate the in‑person experience#LI-NH1
At L&G, we believe it's possible to generate positive returns today while helping to build a better future for all.
If you join us, you’ll be part of a welcoming, inclusive culture, with opportunities to collaborate with people of diverse backgrounds, views, and experiences. Guided by leaders with integrity who care about your future and wellbeing. Empowered through initiatives which support people to develop their careers and excel.
We care passionately about outcomes rather than attendance and are therefore open to discussing all kinds of flexible working options including part-time and job shares. Although some roles have limited flexibility due to customer demand, we accommodate requests when we can.
It doesn’t matter if you don’t meet every single criterion in this advert. Instead, think about what you excel at and what else you can bring in terms of strengths, potential and connection to our purpose.