Information Security Analyst

About Euromonitor

Euromonitor International leads the world in data analytics and research into markets, industries, economies and consumers. We provide truly global insight and data on thousands of products and services; we are the first destination for organizations seeking growth. With our guidance, our clients can make bold, strategic decisions with confidence.

Overview of the role:

This is an opportunity for a software engineer to begin or accelerate a career in information security. You will join the Information Security and Compliance team and apply your engineering skills to practical cyber security work, including software security reviews, vulnerability management, penetration testing, risk assessments, automation, cloud configuration reviews and security administration.

The role is designed to build broad, hands-on experience across security, cyber and compliance disciplines while allowing you to use and deepen your technical specialism. You will work with colleagues across Architecture, Engineering, IT, Legal, Procurement, Compliance and Sales, so the ability to communicate technical risks clearly to non-technical audiences is essential.

Your development will be planned with your manager and reviewed regularly. As your knowledge and confidence grow, you will take on greater ownership and independence, with support to work towards relevant professional certifications.

Requirements

What you’ll do

• Review application code, architecture, APIs, dependencies and third-party integrations for security weaknesses, then provide clear, practical recommendations.
• Triage findings from static analysis, dependency scanning and related tools, and work with developers to track remediation through to completion.
• Support internal and third-party penetration testing, including scoping, scheduling, supervised web application and API testing, and remediation tracking.
• Run vulnerability scans, assess findings by risk, maintain accurate records and follow up with system owners.
• Complete security assessments for suppliers, software, tools and services, including AI-enabled tools and services connecting to company data.
• Support vendor onboarding, customer security questionnaires, audits and evidence gathering for standards such as ISO 27001 and Cyber Essentials.
• Learn to review security and data protection provisions in customer and supplier contracts, escalating risks to Legal, Procurement and senior security colleagues.
• Coordinate security projects, assessments and questionnaires by tracking owners, actions, risks, deadlines, metrics and status updates.
• Monitor cyber security queues, assist with alert and phishing triage, and support security tooling, user access reviews and awareness initiatives.
• Use scripting and development skills to automate evidence collection, reporting, ticket workflows and data analysis, and build lightweight tools or dashboards.
• Contribute to secure development guidance, security documentation and the continuous improvement of processes and controls.

What we’re looking for :

You will bring a strong software engineering foundation, genuine curiosity about cyber security and the motivation to develop across multiple security disciplines.

• 1–2 years of professional experience in software engineering, development or a closely related technical role.
• A bachelor’s degree in Computer Science, Software Engineering, Cyber Security or a related field.
• Proficiency in at least one programming or scripting language, such as Python, JavaScript, TypeScript, C#, Java, Go or PowerShell.
• A solid understanding of the software development lifecycle, Git or another version-control system, APIs and web application fundamentals, including HTTP, authentication, authorisation and session management.
• The ability to read code, recognise common insecure patterns and demonstrate awareness of common vulnerability classes such as the OWASP Top 10.
• Strong organisation, attention to detail and the ability to manage multiple priorities, take ownership and escalate concerns appropriately.
• Clear written and verbal communication skills, with the confidence to explain technical risks to both technical and non-technical stakeholders.
• Adaptability, sound judgement, discretion and a collaborative approach when handling sensitive information.

Useful but not essential: hands-on exposure to Burp Suite, capture-the-flag events, bug bounty programmes or personal security projects; CI/CD and security scanning tools; Azure, GCP, Microsoft 365 or Entra ID; vulnerability management, EDR or third-party risk tools; and an interest in ISO 27001, Cyber Essentials, GDPR, contracts and risk management.

Certifications: Security+, CEH, eJPT, PNPT or Burp Suite Certified Practitioner would be advantageous but are not required. The successful candidate will be supported in working towards relevant certifications as part of their development plan.

Benefits

Why work for Euromonitor?

Our Values:

We seek individuals who act with integrity

We look for candidates who are curious about the world

We feel that as a community, we’re stronger together

We seek to enable people to feel empowered

We welcome candidates who bring strength in diversity

International: We have a multinational workforce and communicate daily across our 16 global offices.

Hardworking and Sociable: Our staff balance hard work with enjoyment, offering flexible hours and regular social events, including after-work meetups, summer and Christmas parties.

Committed to Making a Difference: Our Corporate Social Responsibility Programme provides two volunteering days annually; donation amounts for new starters and supports local and international charities through various initiatives.

Excellent Benefits: We offer competitive salaries, private health insurance, and generous holiday allowances, amongst much more!

Opportunities to Grow: We provide extensive training and development, promoting from within and across departments, and rewarding talent.

Equal Employment Opportunity: Euromonitor International does not discriminate based on race, colour, religion, sex, national origin, political affiliation, sexual orientation, gender identity, marital status, disability, genetic information, age, membership in an employee organization, or other non-merit factors.