Junior Information Security Officer
Entry-level Information Security role at Experian supporting the Security Manager with governance, risk and compliance work for Experian Data Quality: maintaining the ISMS, ISO 27001 and SOC 2 audit activities, vulnerability monitoring, and security reporting. Hybrid London-based role (40% office) for candidates starting a security career.
- Compensation
- Not disclosed
- Location
- London, gb
- Work setup
- Hybrid
- Seniority
- Junior
- Employment
- Full time
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Interest in Information Security, Risk Management, and Compliance
- Experience with information security principles and controls
- Analytical and problem-solving skills
- Relationship management skills, with experience engaging and influencing senior partners
- Strong organisational skills and attention to detail
- Ability to manage multiple tasks and priorities effectively
- Self-motivated and able to work independently; trustworthy with a willingness to learn
Nice to have
- Qualification, degree, or current studies in Cyber Security, IT, Computer Science, or a related field
- Interest in developing a career in Information Security, Risk, Compliance, or Audit
- Awareness of cyber security principles and frameworks (e.g. ISO 27001, NIST, Cyber Essentials), with relevant certifications or willingness to obtain them
Full description
We are looking for someone with a passion for Information Security. This entry-level role offers the opportunity to gain hands-on experience across security governance, risk management, compliance, audit, and vulnerability management within a global organisation.
The Junior Information Security Officer will support the Information Security Manager in delivering security assurance activities across Experian Data Quality (EDQ). You will help ensure compliance with ISO 27001, SOC 2, Experian security standards, and regulatory requirements while supporting the continuous improvement of EDQ's security and compliance posture.
You will work with colleagues, customers, auditors, and partners across multiple regions, with occasional travel to regional EDQ offices to support ISO 27001 certification and audits.
Responsibilities
Reporting into the Security Manager, you will support with:
Security Governance, Risk & Compliance
- Support the maintenance and improvement of the Information Security Management System (ISMS).
- Work with Experian Global Security partners to monitor and support compliance with Experian Global Policies, security standards, and applicable regulatory requirements.
- Identify internal and external issues that may impact Information Security.
- Attend and contribute to Information Security and ISMS governance meetings.
Audit & Assurance
- Help with ISMS internal audits and supporting Global Internal Audit activities.
- Support ISO 27001 certification activities across multiple regions.
- Help with SOC 2 attestation activities for EDQ's flagship application.
- Support customer, regulatory, and third-party audits.
- Track audit findings and supporting the completion of agreed remediation actions.
Vulnerability & Security Monitoring
- Monitor, and reporting on technology vulnerabilities and remediation activities.
- Analyse security incidents, events, and trends to identify areas for improvement.
- Help maintain security metrics, reporting, and risk tracking.
Security Support & Engagement
- Support Project Managers and Scrum Masters through the Project Security Assessment (PSA) process by providing guidance, documentation, and assistance.
- Raise awareness of important information security risks, projects, and best practices across the business.
- Coordinate customer security and compliance enquiries with the appropriate partners.
Why Join Us?
This role is ideal for someone at the start of their Information Security career who is wanting to develop and accepts new challenges, and gain practical experience in a supportive environment. We are looking for attitude, curiosity, and potential as much as experience, and will support you in developing their technical knowledge, professional skills, and industry qualifications.