Information Security Analyst
Posted 9 Oct 2026
Advertised as “Information Security Analyst - Product Assurance”
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 4+ yrs
- Management level
- Individual contributor
- Employment
- Hybrid
No salary listed for this role.
CertificationsSecurity+, CSA CCSK, AWS Certified Security, Microsoft Azure Security Engineer Associate, CISSP, CCSP, SSCP, CISA, CISM, CRISC, CGEIT
Job Title / Role
Information Security Analyst – Product Assurance
Reporting to
Information Security Manager – Sainsbury’s
Division/Dept
Data Governance and Information Security
Location
Holborn, Coventry, Manchester (Flexible)
In a nutshell
As an Information Security Analyst in the Data Governance and Information Security Team, you will be working within the Product Assurance team who are responsible for ensuring our Engineering and Development communities are building and maintaining secure products through their entire lifecycle.
You will be continually reviewing our security posture and setting the direction on how best to make improvements in line with the evolving threat landscape and core business objectives.
The ideal candidate will have 4+ years’ experience working within Information or Cyber Security and be passionate about continuous professional development. You will be asked to provide recent, industry-respect certificates if successful at interview to demonstrate your ongoing education.
Whilst this role isn’t ‘hands-on’ candidates are expected to have an in-depth knowledge of security technologies and how these are integrated in monolithic and microservice architectures.
What you need to do
As an Information Security Analyst, you will have good all round infosec experience coupled with finely honed Stakeholder Management skills to ensure that robust security is maintained across our environment.
As an Information Security Analyst, you will have good all round infosec experience coupled with finely honed Stakeholder Management skills to ensure that robust security is maintained across our environment.
-
Work in a flexible, agile manner within Engineering Families, whilst maintaining appropriate levels of challenge and governance
-
Ensure security is built in by design, products are delivered securely with client and employee data appropriately protected
-
Define Security Non-Functional Requirements for each project and ensure that they are fulfilled prior to going into service, ensuring the relevant technology standards are applied to specific projects
-
Liaise with the Information Security Testing Team to ensure that Ethical Hacking, Code Reviews, Application Scanning, and Infrastructure Scanning is conducted.
-
Provide end to end assurance of IT products across the Group, throughout its lifecycle, providing approvals where appropriate