Remote Information Security Analyst

Salary: £21,000 - 59,000 per year

Requirements

• We want someone with at least 2 years of relevant experience in Information Security.
• Were looking for people with a passion for security and a drive to improve things through technology.
• Experience in, or knowledge of, automating GRC and other security processes to reduce manual work is important.
• Strong analytical and problem-solving skills, with the ability to identify and mitigate security risks, are important.
• We need someone who understands information security principles and can communicate them clearly to non-specialists.
• Experience producing or supporting security awareness programs across different business environments is valuable.
• Knowledge of industry and regulatory security standards such as ISO 27001, SOC2, and GDPR is important.
• Security certifications are a plus.
• Security qualifications such as apprenticeships or degrees are a plus.
• Experience working in organisations maintaining ISO 27001 and/or SOC 1 and SOC 2 Type II certifications is helpful.
• A broader understanding of technology, especially AWS or other cloud service providers, is helpful.
• A background in a technical role, or technical knowledge gained through education or training, is helpful.

Responsibilities

• We will have you maintain and improve our Information Security Management System (ISMS) and related policies, guidelines, standards, and procedures.
• We will have you contribute to the development of our security assurance function.
• You will perform security risk assessments and maturity assessments for our Group.
• You will help promote a positive security culture and raise awareness through training and other initiatives.
• You will support the implementation of security processes and requirements.
• You will provide security advice and guidance to our wider technical team.
• You will liaise with stakeholders on security issues and provide remediation and improvement recommendations.
• You will support our audit and compliance automation programs so we can demonstrate compliance as we scale.
• You will work with our wider Security team to help set the security strategy for Octopus Energy Group and our subsidiaries.
• You will keep up to date with the latest security trends and evaluate their potential impact on our systems, helping the business understand and manage associated risks.
• You may also get involved in other security-related projects and initiatives as needed, collaborating with other teams to improve security across our organisation.

Technologies

• AWS
• Cloud
• Support
• Security
• LESS
• REST

More

We are Octopus Energy Group, building a small and efficient Cyber and Information Security team to help us use technology to make a big green dent in the universe and support a more sustainable future. This is a varied role in a growing team, where youll work primarily with our Octopus Energy Group services and also with Group subsidiaries to solve business challenges and improve our services. We offer flexibility on salary based on experience, a unique culture built on autonomy and collaboration, and a strong emphasis on rewarding people with perks they care about. We have been recognised as the UKs top company to work for and ranked among the top ten in the Sunday Times Best Places to Work 2024. Our recruitment process usually takes up to 4 weeks, and were committed to an inclusive, flexible interview experience with equal opportunities for all.

last updated 27 week of 2026