Remote Information Security Analyst

Salary: £54,000 - 94,000 per year

• Strong experience within Information Security / GRC environments
• Proven experience working with Cyber Essentials+
• Proven experience working with ISO
  27001
• Experience conducting security risk and controls assessments
• Strong documentation and stakeholder management skills
• Experience producing and maintaining security policies, standards, and procedures
• Ability to communicate security findings clearly to both technical and non-technical stakeholders
• Broader vulnerability management exposure is desirable
• Experience working within enterprise-scale or regulated environments is desirable

• Identify, analyse, and support the management of information security and IT risks across the business
• Work closely with stakeholders, vendors, and internal teams to assess security controls and risk exposure
• Support compliance activities aligned to Cyber Essentials+ and ISO
  27001 standards
• Create and maintain information security policies, standards, procedures, and wider GRC documentation
• Conduct internal security assessments and reviews, clearly documenting findings and recommendations
• Maintain key security knowledge resources including process documentation, RACIs, training materials, and contract information
• Collaborate with risk owners to identify, manage, and mitigate vulnerabilities and threats effectively

• AI
• Support
• Security
• HTTP

Gigged AI is an open talent marketplace specialising in the IT and technology sector. We are searching for an experienced Information Security Analyst to join our security function on a long-term contract basis. This role is preferably hybrid, with 2 days per week in our Glasgow City Centre office, though we will consider flexibility for applicants outside Glasgow. The role is UK-based, with an initial 3-month contract expected to extend up to 12 months with rolling break clauses.

We are looking for someone to support a large enterprise environment with a focus on Cyber Essentials+, ISO
27001, information security governance, risk management, and internal security assessments. The day rate is £400 and the position is inside IR35.