Security Analyst

Digital Science

Information Security Analyst in Digital Science managing compliance and security risk. Collaborating with teams to drive security initiatives and handle audits and assessments.

Posted 7/24/2026full-timeRemote • 🇬🇧 United KingdomMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Information Security Governance, Risk Management, and Compliance (GRC) with a strong focus on audit remediation and regulatory deliverables. Proficient in managing security frameworks such as ISO 27001 and NIST 800-218 while effectively communicating complex security topics to diverse stakeholders.

Highest-signal resume keywords

Information Security GRCAudit RemediationISO 27001NIST 800-218GRC Platforms

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security ComplianceIT AuditRisk ManagementPhishing Simulation AnalysisSecurity Metrics DevelopmentRegulatory ReportingSecurity Control AssessmentData TrackingIncident HandlingCorrective Action Management

Soft Skills

Strong Communication SkillsOrganisational SkillsDetail-OrientedCollaborative MindsetIntegrity and Ethical Conduct

Tools & Technologies

GRC ToolingTracking ToolsDashboardsReporting Tools

Industry Keywords

Cyber EssentialsTISAXCompliance DeliverablesStakeholder EngagementCross-Functional Collaboration

About the role

Key responsibilities & impact

Track and drive remediation of all information security related findings from internal audits, external audits, penetration tests and tabletop exercises. Maintain accurate registers, hold action owners to deadlines and escalate issues based on risk exposure.
Coordinate information security evidence and inputs across multiple business areas.
Chase and track all information security compliance deliverables, making sure requests from regulators compliance and audit are answered accurately and on time.
Prepare progress updates on open findings, compliance deliverables and regulatory action items for stakeholders.
Run and analyse phishing simulation campaigns, using the results to shape targeted awareness activity.
Support the development and maintenance of information security metrics, dashboards and reporting to governance forums and senior management.
Support the production of quarterly metrics and GRC assessments reports.
Support internal audits and drive corrective actions through to closure, keeping registers current and accurate.
Support ongoing alignment with information security frameworks including ISO 27001, Cyber Essentials, NIST 800-218 and TISAX and assess security controls against them, providing recommendations for improvement.
Administer GRC tooling supports the security team and wider business areas with tracking and reporting that give clear visibility of where things stand.
Build solid working relationships with action owners, compliance, risk and audit so that chasing things down does not become adversarial.
Provide support for security monitoring and incident handling.
Partner with technical teams to support investigations and analysis of security issues.

Requirements

What you’ll need

Experience in Information Security GRC, IT audit, IT risk, or compliance coordination.
Familiarity with security frameworks and how audit finding remediation works in practice.
Strong organisational skills, able to track a high volume of open items, deadlines and dependencies across multiple workstreams without losing grip.
Experience with GRC platforms or tracking tools and the ability to pull useful reporting from them is a plus.
**Who You Are / Behaviours **
Confident in taking ownership and driving issues through to resolution.
Organised and persistent, comfortable holding people to account without it becoming adversarial.
Strong communication skills, both written and verbal; ability to translate complex security topics for non-technical stakeholders.
Detail-oriented and organised with the ability to manage multiple priorities under pressure.
Integrity, ethical conduct and discretion when handling confidential information.
Collaborative mindset; able to work cross-functionally with teams such as IT Infrastructure, DevOps, Engineering, Legal and HR.
Commitment to continuous professional development, with a genuine interest in building a career in GRC and security compliance.
Don't worry if you don't meet every qualification—let us be the judge! Studies show that many qualified candidates from under-represented groups hesitate to apply unless they meet every single requirement. We are dedicated to building a diverse and inclusive team and strongly encourage you to submit your application.

Benefits

Comp & perks

We invest in, nurture and support innovative businesses and technologies that make all parts of the research process more open, efficient and effective.
**The talent we secure is fundamental to us achieving our vision and our growth plans. The values we live by are:
**We are **brave in the pursuit of better**
We are **collaborative and inclusive**
We are **always open-minded**
We are **from and for the community** *****At Digital Science, our vision is to see research flow seamlessly – trusted, collaborative, and accessible – fueling breakthroughs that push humanity forward. This ambitious mission is one we achieve together, by enabling open, collaborative, inclusive research.*
***We firmly believe that to truly innovate and solve the complex challenges faced by our customers, from researchers and universities to funders and publishers, we need diverse perspectives, experiences, and ideas. A rich mix of voices drives quality insights, fosters enhanced collaboration, and ultimately pushes knowledge forward more effectively.*
***As an equal opportunity employer, we are committed to building and nurturing a workplace where every individual feels valued and belongs. All applicants will be considered for employment without attention to race, colour, religion, age, sex, sexual orientation, gender identity, national origin, veteran, or disability status. Beyond recruitment, we strive to cultivate an environment where inclusivity is woven into the fabric of our culture, enabling everyone to be their best self and do their best work.*