Information Security Analyst

• Serve as a point of contact for client information security requests, review contracts for compliance, and address client security concerns.
• Manage third-party risk assessments, evaluate vendor security controls, and review exception requests.
• Conduct business impact assessments and facilitate business continuity and disaster recovery exercises.
• Support compliance management, governance frameworks, risk management, and ISO 27001 certification maintenance.

This role ensures the security and resilience of environmental consulting services, protecting client data and critical business operations, thereby enabling ERM to continue its mission of creating a sustainable future.

• Bachelor's degree in Computer Science, Information Security, or related field.
• 3-4 years of experience in information security, compliance, or related field.
• Strong verbal and written English communication skills, including presentation and technical report writing.
• Hands-on experience with GRC tooling (e.g., risk management, third-party security).

Compensation and benefits not specified in the posting.

Environmental Resources Management (ERM) is a leading global sustainability consultancy, partnering with clients to deliver innovative solutions in environmental, health, safety, and social impact.