Senior Information Security Governance Analyst; VA

Senior Information Security Governance Analyst (VA831)

Location:

Southampton

Department:
Technology

Experience:

At least 3 years experience in a previous information security or data governance type role, advising and shaping how technology solutions can utilise AI and support business innovation

Duties and responsibilities include:

• Provide information security and governance advice for innovation and AI initiatives across the Group.
• Review projects and recommend improvements to security, privacy and data protection controls.
• Support the development of AI governance policies, procedures and user guidance.
• Conduct AI risk assessments and provide recommendations to mitigate identified risks.
• Manage security and privacy assessments, including DPIAs and related reviews.
• Support the maintenance of ISO 27001 and future ISO 42001 management systems.
• Contribute to information governance, data classification and records management initiatives.
• Support client and supplier assurance activities.
• Produce management reporting, key risk indicators and governance metrics.
• Build strong relationships with stakeholders across the business and third-party suppliers.
• Promote cyber security awareness and information governance best practice.

Candidate Profile:

We are looking for a proactive Information Security Governance professional with experience in information security, data governance or risk management. You will be a strong communicator who enjoys working across technical and business teams, with a genuine interest in innovation, artificial intelligence and emerging technologies.

You should bring:

• Experience in information security, cyber security, data governance or a related field.
• Knowledge of information security, data protection and governance principles.
• Experience supporting risk assessments, security reviews and compliance activities.
• An interest in AI, emerging technologies and AI governance.
• Knowledge of privacy and data protection requirements.
• Understanding of information security standards such as ISO 27001.
• Experience developing or supporting policies, procedures and governance frameworks.
• Strong stakeholder management and communication skills.
• Excellent analytical and problem-solving abilities.
• Relevant information security and/or data protection certifications.
• Degree-level education would be advantageous.

You will thrive in this role if you:

• You are professional, proactive and solutions-focused.
• You have a genuine interest in innovation, AI, cyber security and information governance.
• You communicate confidently and build strong stakeholder relationships.
• You enjoy collaborating across business and technical teams.
• You can manage multiple priorities and work independently.
• You have strong attention to detail and deliver high-quality work.
• You are motivated, adaptable and eager to learn.
• You remain calm and effective in a fast-paced environment.

What we offer in return:

• A 35-hour working week (9:00am – 5:00pm) with a 60-minute lunch break
• Training and development support
• 25 days' holiday with the option to buy or sell up to 5 additional days per financial year
• Private medical insurance
• Pension scheme
• Permanent health insurance
• Life assurance (4x annual salary)