Information Security Analyst

Location: London

Department: Finance
London thames river aerial view at night

Role Purpose

Avanti must deliver against the highest industry standards for security and quality management due to the nature of its business and the customers it serves.  As a result, these clients will request information and/or documentation around the control environment. The information security analyst will provide responses to these inquiries to provide assurance that the relevant controls are in place, without compromising private or company confidential information

Duties & Responsibilities

  • Maintain and develop the Quality Management System (QMS) based on ISO 9001:2015 international standard requirements
  • Maintain and develop the Information Security Management System (ISMS) based on ISO 27001:2013 international standard requirements
  • Maintain and develop the Integrated Management System (IMS) consisting of the ISMS and QMS using the requirements of PAS 99
  • Provide support for the implementation of the Risk Treatment Plan (RTP) for all identified risks using the requirements of Avanti Risk Management Framework and the requirements of ISO 9001:2015 and ISO 27001:2013
  • Participate in all Internal Audits within the Integrated Management System (IMS) within Avanti
  • Provide assistance in ensuring effective implementation of corrective actions for non-conformities generated during Internal and External Audits
  • Provide support for External Auditors during Surveillance and Recertification Audits
  • Provide support in trainings and implementation activities related to ISO 27001 and ISO 9001
  • Provide support for Business Continuity and Disaster Recovery activities.
  • Provide support for ISMS and QMS management meetings including technical experts.
  • Provide support to the Head of Information Security as required
  • Maintain a deep understanding of the organisations wide objectives, interactions, issues and risks
  • Review information prior to submission for completeness and accuracy

Skills & Qualifications


  • Educated to degree level or equivalent
  • Thorough knowledge of business processes and IT systems is desirable
  • Foundation certificate in Quality Assurance and Information Security (minimum)
  • Internal Auditor – ISO 27001:2013
  • Internal Auditor – ISO 9001:2015
  • Excellent planning skills
  • Strong presentation & training skills
  • Experience in project management, security management and risk management methodologies
  • Working knowledge of Quality Management Systems (QMS)
  • Ability to prioritise multiple tasks and follow through to meet deadlines
  • Strong problem solving and analytical skils
  • Critical thinking ability to define the problem, apply the research methods and think strategically to recommend a course of action
  • Working knowledge of Information Security Management system (ISMS)
  • Experience of driving compliance with key international standards
  • Enthusiasm to grow and develop
  • Strong work ethic and able to respond promptly to business demands even at short notices
  • Excellent communication, people and interpersonal skills and the ability to interact with all levels of management
  • Strong Microsoft suite skills and other applications
  • Required to be a UK resident with full EU Work Permit and UK VISA, due to Security Clearances and Data Protection rules in some of our markets
  • Prepared to work in high risk countries such as Nigeria
  • Experience in internal audit practice


  • Security Cleared

In addition to the above responsibilities, the jobholder is required to perform other reasonable duties as assigned by the line manager from time to time.

Remuneration will be related to skills and experience.

To apply for this role please complete the form below