Information Security Analyst
G MASS Consulting · London
G MASS is seeking to deploy one of our own Information Security Analysts into a specialist Lloyd's / London Market insurance engagement, on a fixed-term contract (FTC) running to the end of November 2026. The consultant will be embedded within the client's Information Security function, providing hands-on support across third-party risk management, day-to-day security operations, incident support, and compliance and assurance activity. This is a client-facing, delivery-focused role suited to a consultant comfortable operating independently within a regulated financial services environment.
Key Responsibilities:
- Complete and progress supplier security due diligence, risk assessments and periodic reviews, clearly documenting findings, required remediation, and escalation points.
- Support Triage, conduct threat intelligence, and respond to day-to-day Information Security requests from the business, providing clear, risk-based advice and escalating material matters promptly.
- Support the assessment, coordination, documentation and follow-up of Information Security incidents and enquiries in accordance with established processes.
- Assist with evidence gathering, control validation, audit and regulatory requests, and remediation tracking against relevant obligations and frameworks, including ISO 27001, NIST CSF, NYDFS, FCA, and PRA where applicable.
- Conduct structured risk and control assessments across third parties, business activities, and projects, ensuring identified risks and actions are accurately recorded and tracked.
Requirements
- Proven experience in an Information Security, Cyber Risk, or IT Risk role within financial services, insurance, or another regulated sector
- Practical experience of third-party / supplier security risk assessment and due diligence processes
- Working knowledge of ISO 27001, NIST CSF, and awareness of NYDFS Cybersecurity Regulation
- Familiarity with UK regulatory expectations relevant to information security, including FCA and PRA requirements
- Experience supporting security incident response, including documentation and post-incident follow-up
- Confident engaging directly with business stakeholders, translating technical risk into clear, actionable advice
- Strong documentation and record-keeping discipline, comfortable maintaining risk registers and audit evidence
- Relevant certification desirable (e.g. CISSP, CISM, ISO 27001 Lead Auditor/Implementer, or equivalent)
- Able to work independently as a deployed consultant within a client's existing Information Security team and governance structure
Benefits
Length: Initial 2 month contract
About the Engagement
This role is a G MASS-managed consultant deployment: the successful candidate will remain a G MASS employee, working on-site or hybrid with our client under a fixed-term or ongoing statement of work. G MASS provides specialist Lloyd's and London Market resourcing and technology advisory, placing experienced consultants into insurance sector engagements across governance, risk, and technology functions.