Overview
In this role you will support the Information Security Manager to strengthen security governance, risk, and compliance across Experian Data Quality. You will help maintain the ISMS, assist with audits, and contribute to ISO 27001 and SOC 2 initiatives in a global setting. The role offers hands-on experience in vulnerability management, security monitoring, and cross-region collaboration with customers, auditors, and partners. This is an opportunity to grow in a supportive environment while shaping EDQ’s security posture and compliance readiness.
Pay / Benefits
- Hybrid working – 40% office-based
- Competitive compensation and discretionary bonus
- Pension
- Bupa healthcare
- Sharesave Scheme
- 25 days annual leave + 8 bank holidays + 3 volunteering days
Responsibilities
- Support the maintenance and improvement of the Information Security Management System (ISMS)
- Monitor and ensure compliance with Experian Global Policies and regulatory requirements
- Attend and contribute to Information Security and ISMS governance meetings
- Assist ISMS internal audits and Global Internal Audit activities
- Support ISO 27001 certification activities across multiple regions
- Assist with SOC 2 attestation activities for EDQ’s flagship application
- Support customer, regulatory, and third-party audits
- Track audit findings and assist in remediation actions
- Monitor vulnerabilities and remediation activities
- Analyze security incidents and trends to identify improvements
- Maintain security metrics, reporting, and risk tracking
- Support PSA process with Project Managers and Scrum Masters
- Raise awareness of information security risks and best practices across the business
- Coordinate customer security and compliance inquiries with partners
Key requirements
- Interest in Information Security, Risk Management, and Compliance
- Understanding of information security principles and controls
- Analytical and problem-solving abilities
- Relationship management and experience engaging senior partners
- Strong organizational skills and attention to detail
- Ability to manage multiple tasks and priorities
- Detail-oriented and risk-aware
- Self-motivated and able to work independently
- Trustworthy with a willingness to learn
- Analytical thinking
- Problem-solving
- Stakeholder engagement
- Knowledge of information security principles and controls
- Familiarity with ISMS/ISO 27001
- Understanding of risk management and audits
…
