Junior Information Security Officer

Overview

In this entry-level role you support the Information Security Manager to strengthen EDQ’s security and compliance posture across regions. You’ll help maintain the ISMS, support audits and certification activities (ISO 27001, SOC 2), and monitor vulnerabilities and risk. You work with a global team, auditors, and partners to ensure regulatory alignment and continuous improvement. This is an opportunity to grow in information security within a purpose-driven, cross-functional environment.

Pay / Benefits

• Hybrid working
• Competitive compensation with discretionary bonus
• Pension
• Bupa healthcare
• Sharesave Scheme
• 25 days annual leave + 8 bank holidays + volunteering days

Responsibilities

• Support the maintenance and improvement of the Information Security Management System (ISMS)
• Monitor and support compliance with global policies, security standards, and regulatory requirements
• Assist with ISMS internal audits and Global Internal Audit activities
• Help with ISO 27001 certification activities across multiple regions
• Support SOC 2 attestation activities for EDQ
• Track audit findings and remediation actions
• Monitor technology vulnerabilities and remediation activities
• Analyze security incidents and trends to identify improvements
• Maintain security metrics, reporting, and risk tracking
• Support Project Security Assessments and liaise on security risks with stakeholders
• Raise awareness of information security risks and best practices across the business
• Coordinate customer security and compliance inquiries with partners

Key requirements

• Interest in Information Security, Risk Management, and Compliance
• Experience with information security principles and controls
• Analytical and problem-solving skills
• Relationship management skills with experience engaging senior partners
• Strong organisational skills and attention to detail
• Ability to manage multiple tasks and priorities

• Analytical thinking
• Problem-solving
• Relationship management
• ISO 27001 knowledge
• SOC 2 awareness
• Information Security Management System (ISMS) familiarity

…