Information Security Analyst

Overview

In this role you help keep FundApps secure, resilient and trustworthy as we scale. You will operate across security operations, risk, audits and the Information Security Management System to protect clients and the business. You’ll own ISO 27001 and SOC 2 control activity end-to-end, work with cross-functional partners, and drive improvements that make security easier to follow. This is a hands-on, learning-friendly opportunity in a growing SaaS environment with a clear impact on risk and trust.

Pay / Benefits

• private health insurance
• life insurance
• flexible stipend
• mental health coaching
• matched pension contribution up to 10%
• Bonusly peer bonuses? (Bonusly)

Responsibilities

• Own ISO 27001 and SOC 2 controls operation from evidence collection to remediation tracking and audit preparation
• Organise and chair monthly security review meetings
• Collaborate with Legal and Revenue on security questionnaires and RFPs to ensure accurate communications
• Plan and execute penetration testing campaigns end-to-end
• Manage annual business continuity planning exercises
• Assess vendors for security risk and mitigation
• Support vulnerability management across the estate, prioritising and guiding remediation
• Monitor security alerts and incidents, ensuring proper investigation and closure
• Support security awareness activities and practical guidance for colleagues
• Improve security documentation and processes to be clear, repeatable and useful
• Conduct recurring access reviews on key systems and follow up on anomalies
• Contribute to maintaining the Information Security Management System including risk registers and management reviews

Key requirements

• Day-to-day ownership mindset with the ability to learn quickly
• Strong analytical mindset and thorough, detail-oriented approach
• Comfort with ambiguity and changing requirements
• Ability to communicate effectively with cross-functional teams
• Proactive problem solving and willingness to ask questions until understood
• Strong collaborative skills and willingness to give and receive feedback
• Right to work in the UK without visa sponsorship

• curiosity
• ownership
• transparency
• security operations
• vulnerability management
• incident response

…