Junior Information Security Officer

Job description
We are looking for someone with a passion for Information Security. This entry-level role offers the opportunity to gain hands-on experience across security governance, risk management, compliance, audit, and vulnerability management within a global organisation.
The Junior Information Security Officer will support the Information Security Manager in delivering security assurance activities across Experian Data Quality (EDQ). You will help ensure compliance with ISO 27001, SOC 2, Experian security standards, and regulatory requirements while supporting the continuous improvement of EDQ's security and compliance posture.
You will work with colleagues, customers, auditors, and partners across multiple regions, with occasional travel to regional EDQ offices to support ISO 27001 certification and audits.
Responsibilities
Reporting into the Security Manager, you will support with:
Security Governance, Risk & Compliance
Support the maintenance and improvement of the Information Security Management System (ISMS).
Work with Experian Global Security partners to monitor and support compliance with Experian Global Policies, security standards, and applicable regulatory requirements.
Identify internal and external issues that may impact Information Security.
Attend and contribute to Information Security and ISMS governance meetings.
Audit & Assurance
Help with ISMS internal audits and supporting Global Internal Audit activities.
Support ISO 27001 certification activities across multiple regions.
Help with SOC 2 attestation activities for EDQ's flagship application.
Support customer, regulatory, and third-party audits.
Track audit findings and supporting the completion of agreed remediation actions.
Vulnerability & Security Monitoring
Monitor, and reporting on technology vulnerabilities and remediation activities.
Analyse security incidents, events, and trends to identify areas for improvement.
Help maintain security metrics, reporting, and risk tracking.
Security Support & Engagement
Support Project Managers and Scrum Masters through the Project Security Assessment (PSA) process by providing guidance, documentation, and assistance.
Raise awareness of important information security risks, projects, and best practices across the business.
Coordinate customer security and compliance enquiries with the appropriate partners.
Why Join Us?
This role is ideal for someone at the start of their Information Security career who is wanting to develop and accepts new challenges, and gain practical experience in a supportive environment. We are looking for attitude, curiosity, and potential as much as experience, and will support you in developing their technical knowledge, professional skills, and industry qualifications.
Essential
Interest in Information Security, Risk Management, and Compliance.
Experience with information security principles and controls.
Analytical and problem-solving skills.
Relationship management skills, with experience engaging and influencing senior partners.
Strong organisational skills and attention to detail.
Ability to manage multiple tasks and priorities effectively.
Desirable
Qualification, degree, or current studies in Cyber Security, IT, Computer Science, or a related field.
Interest in cyber security and a willingness to develop a career in Information Security, Risk, Compliance, or Audit.
Awareness of cyber security principles and frameworks (e.g. ISO 27001, NIST, Cyber Essentials), with relevant certifications or a willingness to obtain them.

Employment type
Full-time

Work arrangement
Hybrid