Junior Information Security Officer

Overview

In this entry-level role, you will support Experian EDQ’s information security and compliance initiatives within a global context. You will help maintain the ISMS, assist with audits, and monitor risks to strengthen governance and regulatory alignment. You’ll collaborate with diverse stakeholders and contribute to security awareness across technical and non-technical audiences. This is a hands-on opportunity to grow in security governance, risk management, and compliance in a supportive, learning-forward environment.

Pay / Benefits

• Hybrid working – 40% office based
• Great compensation package and discretionary bonus
• Pension
• Bupa healthcare
• Sharesave Scheme
• 25 days annual leave with 8 bank holidays and 3 volunteering days

Responsibilities

• Support the ongoing maintenance and improvement of EDQ’s Information Security Management System (ISMS).
• Assist with compliance activities related to ISO 27001, SOC 2, Experian security standards, and regulatory requirements.
• Support internal, external, customer, and certification audits, including tracking remediation activities.
• Monitor security risks, vulnerabilities, and remediation progress across the business.
• Help maintain security metrics, reporting, and risk registers to support informed decision making.
• Contribute to security governance activities, meetings, and continuous improvement initiatives.
• Partner with business stakeholders to support security assessments, projects, and compliance inquiries.
• Promote security awareness and communicate security risks, requirements, and best practices to both technical and non-technical audiences.

Key requirements

• A genuine interest in Information Security, Risk Management, Governance, or Compliance.
• A degree or qualification in Cyber Security, Information Technology, Computer Science.
• Awareness of security frameworks and standards such as ISO 27001, NIST, or Cyber Essentials.
• Understanding of information security concepts and cyber security best practices.
• Strong analytical, problem-solving, and organisational skills.
• Excellent communication skills with the ability to explain technical concepts to non-technical audiences.
• Strong stakeholder management skills and the confidence to build relationships across teams.
• A proactive approach to learning and developing knowledge of security frameworks, standards, and regulations.

• Analytical thinking
• Effective communication
• Stakeholder management
• Knowledge of ISO 27001, NIST, Cyber Essentials
• Information security concepts and best practices
• Risk management and governance basics

…