Junior Information Security Officer

We're looking for someone with a genuine interest in Information Security who is keen to develop their career in a global organisation. This entry-level role offers exposure across security governance, risk management, compliance, auditing, and security assurance.
Reporting into the Information Security Manager, you will work with colleagues, customers, auditors, and partners across multiple regions. You will help support and improve EDQ's security and compliance programmes, ensuring alignment with ISO 27001, SOC 2, Experian security standards, and regulatory requirements.
Key Responsibilities
Support the ongoing maintenance and improvement of EDQ's Information Security Management System (ISMS).
Assist with compliance activities relating to ISO 27001, SOC 2, Experian security standards, and regulatory requirements.
Support internal, external, customer, and certification audits, including tracking remediation activities.
Monitor security risks, vulnerabilities, and remediation progress across the business.
Help maintain security metrics, reporting, and risk registers to support informed decision making.
Contribute to security governance activities, meetings, and continuous improvement initiatives.
Partner with business stakeholders to support security assessments, projects, and compliance enquiries.
Promote security awareness and communicate security risks, requirements, and best practices to both technical and non-technical audiences.
Why Join Us?
This role is ideal for someone at the start of their Information Security career who is wanting to develop and accepts new challenges, and gain practical experience in a supportive environment.
Essential
A genuine interest in Information Security, Risk Management, Governance, or Compliance.
A degree or qualification in Cyber Security, Information Technology, Computer Science.
Awareness of security frameworks and standards such as ISO 27001, NIST, or Cyber Essentials.
An understanding of information security concepts and cyber security best practices.
Strong analytical, problem-solving, and organisational skills.
Excellent communication skills, with the ability to explain technical concepts clearly to non-technical audiences.
Strong stakeholder management skills and the confidence to build relationships across different teams and levels of the organisation.
A proactive approach to learning and developing knowledge of security frameworks, standards, and regulations.
Desirable
Awareness of Information Security, Risk, Compliance, Audit, or Governance activities and a willingness to develop a career in Information Security

Skills
Auditing, Risk Management

Employment type
Full-time

Work arrangement
Hybrid