InfoSec Analyst Job at AltoVita (London)

Job Description

AltoVita is a multi-award winning accommodation platform that enables enterprises to consolidate accommodation programmes through the power of proprietary technology paired with a human centric approach. AltoVita’s unique offering sets us apart in the market, providing a network of 10 million+ verified and vetted properties are all duty of care compliant, backed by a four-tier quality control process; located in over 35,000 cities & 165 countries world-wide. With our award-winning enterprise software and human-centric approach, we deliver smart and sustainable solutions to global talent mobility & business travel managers worldwide. Our Client Development team plays a vital role as trusted advisors and partners to our clients. Embodying our consultative philosophy, this dedicated team proactively shares new market insights, analyzes data, and empowers our clients with the tools and knowledge to make informed decisions, ensuring our clients are always equipped to make the best choices for their corporate housing needs. AltoVita’s technology provides a cloud-based bridge between the highly fragmented property distribution system and multinational Global 2000 companies. A proprietary two-way API integration with a standardised sourcing process reduces the legacy, inefficient 48-to-72-hour bidding process down to a few minutes, saving valuable time and money. Corporate clients love the bespoke user interface seamlessly configured to their mobility policies, and employees enjoy a greater sense of choice and support in their relocation journey.

Job Responsibility

Support the day-to-day operation of AltoVita’s information security and privacy activities
Supporting the maintenance of security, privacy and compliance documentation
Assisting with tracking security and privacy actions, control improvements and remediation activities
Helping maintain registers such as risks, issues, actions, policies, vendors, assets, data processing activities and control evidence
Coordinating updates between internal teams to ensure agreed actions are progressed
Supporting the preparation of security and privacy reports, summaries and updates for internal stakeholders
Helping ensure security and privacy activities are documented, repeatable and easy to evidence
Escalating risks, issues or delays to the CISO or relevant business owner
Assist with internal and external compliance activities, including ISO 27001, SOC 2, GDPR and client assurance requirements
Supporting evidence gathering for audits, assessments and control reviews
Helping maintain audit trackers, evidence folders and compliance records
Coordinating with internal teams to obtain required documentation and control evidence
Supporting follow-up actions from audits, assessments or client reviews
Assisting with the maintenance of policies, procedures and standards
Helping ensure compliance activities are well organised and delivered within agreed timelines
Supporting the CISO and relevant control owners with audit preparation and remediation tracking
Help maintain clear, practical and accessible security and privacy documentation
Supporting the review and update of information security and privacy policies
Assisting with the creation of standards, procedures, guidance notes and user-facing materials
Helping ensure documents are version controlled, approved and communicated appropriately
Maintaining policy review schedules and tracking required updates
Drafting practical guidance for employees on security and privacy topics
Supporting the communication of policy changes across the business
Helping ensure documentation is accurate, consistent and aligned to business processes
Support the delivery of security and privacy awareness activities across AltoVita
Carry out security and privacy training administration and responsible for ensuring 100% completion rates across the business
Supporting the development of awareness content, reminders, newsletters, FAQs and guidance
Helping coordinate phishing simulations and follow-up communications
Tracking training completion and awareness participation
Supporting campaigns that promote secure behaviours and good privacy practices
Helping make security and privacy feel practical, accessible and enabling
Escalating recurring behavioural or process issues to the CISO or relevant business owner
Support AltoVita’s privacy activities under the direction of the relevant privacy, legal or security lead
Assisting with the maintenance of privacy records, including data processing registers and related documentation
Supporting the tracking of privacy actions, assessments and improvement activities
Helping gather information for privacy reviews, data mapping or data protection impact assessments
Supporting internal teams with practical privacy guidance, escalating complex matters where needed
Assisting with record keeping for data subject requests, incidents or privacy enquiries
Helping ensure privacy documentation remains organised, accurate and accessible
Support the completion of client security and privacy questionnaires, RFP responses and due diligence requests
Assisting with the preparation of responses to client security and privacy questions
Maintaining a library of approved answers, evidence and supporting materials
Coordinating with internal subject matter experts to obtain accurate information
Ensuring responses are consistent with AltoVita’s current controls, policies and practices
Helping translate technical or compliance information into clear, client-friendly language
Tracking open client assurance requests and supporting timely completion
Escalating complex, high-risk or contractual questions to the CISO, Legal or relevant business owner
Support supplier security and privacy processes under the direction of the CISO or relevant business owner
Assisting with supplier due diligence questionnaires and evidence collection
Helping maintain supplier records, risk ratings and review schedules
Tracking supplier security or privacy actions
Supporting periodic reviews of key suppliers
Helping ensure supplier documentation is complete and up to date
Escalating potential supplier risks or concerns to the appropriate owner
Support security, privacy and operational risk processes by helping with coordination, documentation and follow-up
Supporting the logging and tracking of security or privacy incidents
Helping gather relevant information during incident reviews
Maintaining incident notes, timelines and action trackers
Supporting post-incident follow-up and lessons learned activities
Assisting with risk register updates and remediation tracking
Escalating suspected incidents or risks promptly to the CISO or relevant lead
Supporting the documentation of controls, gaps and agreed improvements
This role does not lead incident response or make final risk acceptance decisions
Assist with security-related IT and access control activities where required
Day to day execution of access controls
Supporting access review processes by gathering user access information
Helping track joiner, mover and leaver control activities
Supporting evidence collection for account provisioning, deprovisioning and access approvals
Assisting with documentation of access control processes
Helping monitor completion of agreed access management actions
Oversight and support on internal reviews of security tooling usage, adoption and documentation
Escalating access control issues or gaps to IT, system owners or the CISO

Requirements

Experience in information security, privacy, compliance, IT, risk, audit, operations or a related field
Working knowledge of information security and privacy principles
Awareness of GDPR, ISO 27001, SOC 2 or similar frameworks
Ability to maintain trackers, registers, documentation and evidence records
Strong written and verbal communication skills
Ability to write clear guidance, summaries and user-facing content
Strong organisational skills and attention to detail
Ability to manage multiple tasks and deadlines
Confidence working with stakeholders across different business functions
Practical problem-solving approach
Comfortable using collaboration tools, document repositories and workflow trackers

Nice to have

Exposure to ISO 27001, SOC 2, GDPR or other compliance environments
Experience supporting audits, assessments or evidence collection
Familiarity with security awareness or training activities
Experience supporting client security questionnaires or RFP responses
Exposure to vendor risk management or supplier due diligence
Familiarity with GRC tools or compliance platforms
Basic understanding of access management, MFA, endpoint protection and cloud security principles
Relevant certification or willingness to work towards one, such as ISO 27001 Foundation
CompTIA Security+
CIPP/E
CIPM
ITIL Foundation
SOC 2 or audit-related training

AltoVita - All Job Offers

Select Country

InfoSec Analyst

Job Description

Job Responsibility

Requirements

Nice to have

Looking for more opportunities?

InfoSec Analyst

InfoSec Vulnerability Senior Analyst / Analyst

InfoSec Risk Senior Analyst / Analyst

InfoSec Compliance Senior Analyst / Analyst

Mainframe Developer

Lead Cyber Security Analyst

Database Manager

Information Security Engineer

Information Security Engineer

Our AI answers in your language