Senior Security Analyst
Job Description
- Security Governance, Assurance & Risk
- Support security governance and assurance activities, including monitoring adherence to security policies, standards, and control frameworks
- Perform and support security risk assessments for projects, platforms, and services, documenting risk, impact, and recommended treatment plans
- Assist with internal and external audits (e.g. ISO 27001, SOC 2, PCI DSS), including evidence collection, control testing, and remediation tracking
- Support control design, implementation, and operational effectiveness testing across security and IT controls
- Monitor security metrics, scorecards, and control performance indicators across applications
- Identify non‑compliance and control failures against defined security standards, policies, and SLAs
- Analyse trends and recurring issues to highlight systemic control weaknesses
- Validate the accuracy and relevance of security metric data before escalation or reporting
- Lead the tracking of security non‑conformities, findings, and control gaps identified through metrics and assessments
- Verify that remediation actions are implemented sustainably
- Escalate overdue, high‑risk, or stalled remediation following governance expectations
- Prepare and contribute to security reporting for governance, risk, and assurance forums
- Provide clear, risk‑based summaries of security posture, non‑compliance, and remediation status
- Collaborate with Risk Management, Internal Audit, and Technology teams to proactively identify emerging risks and compliance gaps
You will be reporting to a Senior Manager
You require 6+ years of experience in an information security, IT risk, compliance, or audit role.
- Experience with security and risk frameworks such as ISO 27001, SOC 2, NIST, or similar
- Experience supporting security audits, assurance, and remediation activities
- Familiarity with security metrics, control monitoring, and SLA‑based compliance
- Experience working with application or system owners to improve security issues
- Knowledge of cloud, SaaS, or enterprise platforms
- Hands-on experience of security monitoring tools such as Panaseer, Checkmarx, Wiz.io
Desirable Skills & Qualifications
- Security or risk‑related certifications e.g. ISO 27001 Lead Implementor/Auditor, CCSK, CySA+, Security+, CISA, CRISC, CISSP (or working towards)
- Experience in regulated or data‑driven environments
- Exposure to privacy, data protection, or third‑party risk management
Our uniqueness is that we celebrate yours. Experian's culture and people are important differentiators. We take our people agenda very seriously and focus on what truly matters; DEI, work/life balance, development, authenticity, engagement, collaboration, wellness, reward & recognition, volunteering... the list goes on. Experian's people first approach is award-winning; Great Place To Work™ in 24 countries, FORTUNE Best Companies to work and Glassdoor Best Places to Work (globally 4.4 Stars) to name a few. Check out Experian Life on social or our Careers Site to understand why.
Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is a critical part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work, irrespective of their gender, ethnicity, religion, color, sexuality, physical ability or age. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.
Experian Careers - Creating a better tomorrow together
Benefits
Experian care for employee's work life balance, health, safety and wellbeing. To support this endeavor, we offer the best family well-being benefits, enhanced medical benefits and paid time off.
#LI-Onsite
Experian Careers - Creating a better tomorrow together
Find out what its like to work for Experian by clicking here