Security Analyst

About the role

About us
We are Digital Science and we are advancing the research ecosystem.
We are a pioneering technology company, and our vision is of a future where a trusted and collaborative research ecosystem drives progress for all. We believe in better, open, collaborative and inclusive research. In creating the next generation of tools and working in partnership with the community we tackle some of the biggest challenges to research. In order to achieve our vision, we need innovative, inspiring and dynamic people to join our team. Want to join us?
Your new role As our Information Security Analyst, you will be a core member of our Group Information Security team, working closely with the Security Operations Lead and Senior Analyst to keep our governance, risk and compliance programme running smoothly. You will work across assessments, audits, penetration tests and tabletop exercises, making sure findings have owners, owners have deadlines and deadlines are met.
This Group Information Security team partners all areas of Digital Science and adds value through delivering all aspects of Information Security, contributing to our strategic growth plans.
In this role, you will work closely with the Security Operations Lead and Senior Analyst and alongside our Technology, Legal and Operations teams with contact across all functional units within Digital Science. The successful candidate will get direct exposure to a range of security certifications and frameworks and the full audit lifecycle and does not need to have done everything on this list before, but does need to be organised, persistent and comfortable holding people to account. Please note - due to business need, we can only accept applications from candidates who reside in the following locations where we have established legal entities: UK, Spain, Germany and Romania.

If you apply from outside of these areas, your application will not be considered.
Please be aware that we may close this position early if we receive a high volume of applications, so we encourage you to apply promptly.

Track and drive remediation of all information security related findings from internal audits, external audits, penetration tests and tabletop exercises. Maintain accurate registers, hold action owners to deadlines and escalate issues based on risk exposure.
Coordinate information security evidence and inputs across multiple business areas.
Chase and track all information security compliance deliverables, making sure requests from regulators compliance and audit are answered accurately and on time.
Prepare progress updates on open findings, compliance deliverables and regulatory action items for stakeholders.
Run and analyse phishing simulation campaigns, using the results to shape targeted awareness activity.
Support the development and maintenance of information security metrics, dashboards and reporting to governance forums and senior management.
Support the production of quarterly metrics and GRC assessments reports.
Support internal audits and drive corrective actions through to closure, keeping registers current and accurate.
Support ongoing alignment with information security frameworks including ISO 27001, Cyber Essentials, NIST 800-218 and TISAX and assess security controls against them, providing recommendations for improvement.
Administer GRC tooling supports the security team and wider business areas with tracking and reporting that give clear visibility of where things stand.
Build solid working relationships with action owners, compliance, risk and audit so that chasing things down does not become adversarial.
Provide support for security monitoring and incident handling.
Partner with technical teams to support investigations and analysis of security issues.

Experience in Information Security GRC, IT audit, IT risk, or compliance coordination.
Familiarity with security frameworks and how audit finding remediation works in practice.
Strong organisational skills, able to track a high volume of open items, deadlines and dependencies across multiple workstreams without losing grip.
Experience with GRC platforms or tracking tools and the ability to pull useful reporting from them is a plus.
Who You Are / Behaviours
Confident in taking ownership and driving issues through to resolution.
Organised and persistent, comfortable holding people to account without it becoming adversarial.
Strong communication skills, both written and verbal; ability to translate complex security topics for non-technical stakeholders.
Detail-oriented and organised with the ability to manage multiple priorities under pressure.
Integrity, ethical conduct and discretion when handling confidential information.
Collaborative mindset; able to work cross-functionally with teams such as IT Infrastructure, DevOps, Engineering, Legal and HR.
Commitment to continuous professional development, with a genuine interest in building a career in GRC and security compliance.
Don't worry if you don't meet every qualification—let us be the judge! Studies show that many qualified candidates from under-represented groups hesitate to apply unless they meet every single requirement. We are dedicated to building a diverse and inclusive team and strongly encourage you to submit your application.