Information Security Analyst

Salary: £61,000 - 101,000 per year

Requirements:

• We require candidates to have permission to work in the UK without visa sponsorship.
• We care far more about how you think and work than what youve used before.
• You should be genuinely curious and dig into things that do not look right.
• You should be comfortable asking questions until you fully understand a situation.
• You should be hands-on, thorough, and willing to follow issues into the detail.
• You should be comfortable with uncertainty and embrace change as it comes.
• You should be able to take ownership of your work from day 1.
• You should be comfortable saying, I dont know, let me find out, and learning new ways of doing things.
• You should be comfortable asking for and giving feedback.
• You should provide work updates and communicate regularly about progress and blockers.
• You should look for opportunities to improve workflows, processes, and practices.
• You should be able to identify and help implement process improvements and automation opportunities.

Responsibilities:

• We work across security operations, access reviews, vulnerability management, supplier assurance, security awareness, audits, incident response, risk management, and the day-to-day running of our Information Security Management System.
• We help operate and improve the controls that support our ISO 27001 and SOC 2 programmes.
• We work with Engineering, IT, Legal, Finance, and People to make security a helpful, trusted partner.
• We take full, end-to-end ownership of our ISO 27001 and SOC 2 controls operation, from initial evidence collection and control checks through to remediation tracking and audit preparation.
• We organise and chair monthly review meetings.
• We partner with Legal and Revenue to address security questionnaires and RFPs.
• We direct the end-to-end planning and execution of penetration testing campaigns.
• We manage and facilitate annual business continuity planning exercises.
• We assess our vendors to identify, evaluate, and mitigate security risks from outside partners.
• We support vulnerability management across our estate, helping teams understand, prioritise, and remediate issues.
• We monitor security alerts, incidents, and internal security events, escalating where needed and helping close out issues.
• We support security awareness activities, including onboarding, refresher training, phishing reporting, and practical guidance for colleagues.
• We help improve security documentation and processes so our controls are easy to follow, repeatable, and useful.
• We carry out recurring access reviews across key business systems.
• We help maintain our Information Security Management System, including security objectives, risk registers, management review inputs, and follow-up actions.

Technologies:

• Support
• Security
• LESS

More:

We are FundApps, a growing SaaS business focused on keeping our platform secure, resilient, and trustworthy. This is a broad Information Security Analyst role within our Operations team, and we support our security programmes while getting involved in real security work across the business. We offer hybrid working, with new joiners spending 3 days per week in our London office during their first 6 months and then at least 2 days per week in the office after that. Our benefits include private health insurance, life insurance, a flexible stipend, mental health coaching, matched pension contributions up to 10%, Bonusly micro-bonuses, a £1,000 annual learning budget, unlimited professional development leave, peer-led learning sessions, 25 days of holiday plus additional holiday progression, 26 weeks of leave for all new parents, volunteering leave, and your birthday off. We value diversity, flexibility around religious observances, and a workplace where people can be themselves.

last updated 36 week of 2026