Information Security Analyst

Department: Legal & Compliance

Employment Type: Full Time

Location: London, England, Zinc - London, Hybrid

Key Responsibilities 🗝️

• 🗺️ Driving the Security Roadmap – take the lead on delivering our 2-year security roadmap, covering everything from workplace identity and cyber attack protection to workforce security, ecosystem resilience and secure software development.
• 🔍 Strengthening Our Security Standards – tackle outstanding audit findings and recommendations, putting the right improvements in place and helping us stay on top of compliance deadlines.
• 🤝 Bringing Teams Along on the Journey – work closely with engineering and other teams across the business to drive security improvements, influence decisions and get everyone moving in the same direction.
• 🛠️ Getting Hands-On – roll up your sleeves and get stuck into the technical work, from implementing new systems to rolling out important security controls.
• 🔐 Building Stronger Identity & Access Management – design, implement or mature IAM controls, including Multi-Factor Authentication (MFA), Joiner-Mover-Leaver (JML) processes and Role-Based Access Control (RBAC).

Skills, Knowledge and Expertise 🚀

• ☁️ Google Workspace – practical experience managing and securing Google Workspace environments.
  
  
• 🖥️ AWS – experience working with AWS environments and their security.
  
  
• 🔐 MDM (Mobile Device Management) – understanding of device management and endpoint security.
  
  
• 🛡️ EDR (Endpoint Detection and Response) – experience using EDR tools to monitor, detect and respond to threats.
  
  
• 🔎 Threat Intelligence & Vulnerability Management – experience identifying potential threats, assessing vulnerabilities and helping to strengthen security across systems.

• 🛠️ OWASP SAMM / Secure SDLC maturity models – familiarity with application security frameworks and improving security practices throughout the software development lifecycle.
• 🔑 PIM / PAM Implementation – experience implementing Privileged Identity Management (PIM) or Privileged Access Management (PAM) solutions.
• 🎓 Industry Certifications – qualifications such as CISSP, CISM or CRISC.

• 🧩 Cross-functional Leadership – ability to work collaboratively across different teams and drive security initiatives throughout the business.
• 💬 Influencing Without Authority – confidence in influencing and gaining buy-in from teams, particularly engineering, even when they don't report directly to you.
• ⚡ Prioritisation Under Pressure – ability to manage competing priorities, balance longer-term security projects with urgent demands and keep things moving.
• 📣 Clear Communication – able to explain technical concepts and security risks in a clear, accessible way to both technical and non-technical stakeholders.
• 💡 Pragmatism – able to balance the ideal security approach with practical business needs, finding solutions that strengthen security without slowing down delivery.

What we offer 🍉

• 24 days holiday + Bank Holidays + your birthday off 🎉
• £1200 annual benefits allowance (ThanksBen, from month 2)
• Early finish Fridays (16:00)
• Yearly company retreat abroad ✈️
• 30 days to Work from anywhere 🌍
• Enhanced Maternity, Paternity, and Adoption Leave (13 weeks full pay, 17 weeks half pay, then SMP for maternity, 1 month full pay for paternity/adoption) 🐣
• Statutory pension with NEST (3% employer, 5% employee)
• Zinc shares, issued through the EMI Scheme
• Unlimited access to Spill Therapy
• Company socials, quarterly team socials Free Monday lunches
• Nursery workplace benefit scheme (Yellownest) 
• Option to lease an electric car through Electric Car Scheme 
• Celebrated Zinc anniversaries 🥳