Information Security Analyst

Company Overview

Crown Agents Bank is a growing, regulated UK financial institution dedicated to connecting emerging and frontier markets with the global financial system through innovative FX and payment technologies. The bank focuses on simplifying and enhancing payment flows in complex markets, reducing costs and latency to facilitate faster and more transparent cross-border transactions.

Role Purpose

The Information Security Analyst position is part of the bank’s CISO team, providing broad involvement in information security governance, regulatory compliance, user awareness, and operational support. The role offers exposure across multiple security disciplines and supports the firm's adherence to evolving security requirements and threats.

Key Responsibilities

• Manage logistics and documentation for security governance meetings including agendas, minutes, and action tracking.
• Keep the CISO organizational RACI updated to reflect team responsibilities.
• Compile and distribute comprehensive security reports consolidating input from all security services.
• Track and report progress on the technology roadmap and assist in preparing governance presentations for senior management.
• Administer and maintain security policy and standards libraries with version control and approval tracking.
• Coordinate ISO 27001 evidence collection and support preparation for audits.
• Manage compliance tracking for regulations such as DORA and NYDFS Part 500, including evidence gathering and issue identification.
• Lead evidence submission processes for Cyber Essentials and SWIFT CSP compliance.
• Maintain risk and control registers through platforms like Vanta and RiskConnect, ensuring accurate status and documentation.
• Support audit activities by organizing evidence, scheduling, and monitoring action items.
• Administer the company-wide mandatory security training program, track participation and generate reports.
• Conduct phishing simulations and analyze results to improve user security awareness.
• Oversee security communication campaigns and organize specialist and executive security training sessions.
• Manage vendor security questionnaires, onboarding and annual vendor risk reviews.
• Assist operational security engineers with routine security operations tasks including ticket management and tool administration.
• Contribute to automating repetitive security tasks by documenting and testing workflows suitable for scripting.

Qualifications and Experience

• A university degree or equivalent qualification, ideally with a background in information security, technology, or analytical fields.
• 0 to 2 years of relevant professional experience, preferably in security, compliance, risk management, or technology environments.
• Strong organizational and multitasking skills with attention to detail in record-keeping and process management.
• Proficiency with Microsoft 365 applications and familiarity with security governance or GRC tools such as Vanta or RiskConnect is advantageous.
• Excellent written communication skills to produce clear reports and documentation.
• A strong personal interest in developing a career within the information security field and the CISO function.

Additional Information and Benefits

• Hybrid work arrangement requiring three days per week onsite in London.
• Pension scheme with minimum employee contribution of 2% and employer contribution of 7%, with employer matching up to 10%.
• Life assurance coverage equal to four times the annual salary.
• Group income protection plan.
• Private medical insurance including optional cover for partners and children, covering optical, dental, and audiology services.
• Discretionary bonus opportunities.
• Competitive annual leave entitlement plus two volunteering days.
• Access to a comprehensive benefit hub.