Information Security Analyst - UK

‍

About Nscale

Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.

‍

We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future.

‍

About the Role

We’re looking for an Information Security Analyst to join Nscale and play a key role in protecting our people, systems, and data. You’ll be the go-to expert for monitoring and strengthening our security posture, making sure we stay resilient in a fast-moving threat landscape.

‍

In this role, you’ll handle security operations day-to-day - investigating alerts, responding to incidents, and driving improvements to keep risks under control. You’ll also support company-wide security initiatives, helping to embed best practices and build a culture where security is everyone’s responsibility.

‍

This is a hands-on role where your work directly impacts the safety and trust of Nscale’s operations. You’ll collaborate with our Technology, Compliance and Business Operations teams to streamline security processes, manage tools and vendors, and ensure colleagues are empowered to work securely.

‍

‍

What You’ll be Doing

Compliance and Certification Support

• Maintain and update evidence registers aligned with SOC 2, ISO 27001, and Cyber Essentials frameworks.
• Track and document control ownership, risk assessments, asset registers, and audit readiness checklists.
• Assist in preparing documentation and logs for internal and external audits.
• Monitor compliance status and alert stakeholders to upcoming deadlines or gaps.

‍

Risk Management and Third-Party Risk Management (TPRM)

• Work with the GRC platform Servicely to log vendor information and assign risk tiers.
• Collect, review, and archive supplier risk assessments, security questionnaires, and exception records.
• Follow up with internal and external stakeholders to ensure timely completion of TPRM tasks.
• Assist with the management and maintenance of the Risk Register

‍

Security Awareness and Infosec Training

• Coordinate security training campaigns (e.g. phishing simulations, Metacompliance modules).
• Track staff training completion and follow up on outstanding actions.
• Support the development and communication of internal awareness materials.

‍

Policy and Process Maintenance

• Support policy reviews, version control, and publication across the organisation.
• Assist in ensuring policies are signed off and distributed using HRIS or DMS systems.
• Help with day-to-day documentation of compliance processes and improvements.

‍

About You

• Strong organisational and record-keeping skills
• Ability to follow and maintain structured processes and frameworks
• Familiarity with compliance or IT security environments
• Good communication skills and professional approach
• Confident using documentation tools (e.g. Word, Excel, GRC platforms)

‍

Desirable:

• Understanding of security frameworks such as SOC 2, ISO 27001, Cyber Essentials
• Experience with third-party risk processes or vendor assessments
• Exposure to security awareness platforms or training tools
• Technical curiosity or certifications such as CompTIA Security+ or ISO 27001 Foundation

‍

Equal Opportunities Statement

We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds.

‍

If there’s anything we can do to accommodate your specific situation, please let us know.

‍