Application Guide

How to Apply for Information Security Analyst

at Environmental Resources Management

🏢 About Environmental Resources Management

Environmental Resources Management (ERM) is a global leader in sustainability consulting, helping clients navigate the energy transition and achieve net-zero goals. Working here means contributing to meaningful environmental impact while leveraging your security expertise to protect critical data and systems that enable a low-carbon future.

About This Role

As an Information Security Analyst at ERM, you will be the key liaison between clients and internal security teams, ensuring contractual compliance and addressing security inquiries. You'll also manage third-party risk assessments and support ISO 27001 certification, directly safeguarding the integrity of sustainability-focused projects worldwide.

💡 A Day in the Life

A typical day might start with reviewing client security questionnaires and coordinating responses with legal and IT teams. You could then assess a new vendor's security posture using a GRC tool, followed by a meeting to plan a disaster recovery drill. Afternoons often involve updating risk registers or preparing for an upcoming ISO 27001 surveillance audit.

🚀 Application Tools

Generate Cover Letter

AI-powered, tailored for Environmental Resources Management

Interview Prep

Practice questions for this role

🎯 Who Environmental Resources Management Is Looking For

  • Has 3-4 years of experience in information security, with specific exposure to compliance, risk management, or third-party security.
  • Possesses strong verbal and written English communication skills, able to translate technical security requirements for non-technical clients.
  • Hands-on experience with GRC tools (e.g., ServiceNow, RSA Archer) for risk assessments and vendor management.
  • Understands ISO 27001 standards and has participated in certification maintenance or audits.

📝 Tips for Applying to Environmental Resources Management

1

Highlight any experience with client-facing security requests or contract reviews, as this role is a primary point of contact for clients.

2

Emphasize your familiarity with third-party risk assessment processes and any experience evaluating vendor security controls.

3

Mention specific GRC tools you've used (e.g., ServiceNow GRC, OneTrust) and how you leveraged them for risk management.

4

Showcase your understanding of business continuity and disaster recovery planning, even if from a supporting role.

5

Tailor your resume to include keywords like 'ISO 27001,' 'compliance,' 'vendor risk,' and 'client communication' to pass ATS filters.

✉️ What to Emphasize in Your Cover Letter

['Your ability to serve as a bridge between technical security requirements and client expectations.', 'Experience with ISO 27001 certification maintenance or related compliance frameworks.', "How your background in third-party risk management aligns with ERM's focus on sustainability and client trust.", 'Specific examples of managing multiple security requests or assessments in a fast-paced environment.']

Generate Cover Letter →

🔍 Research Before Applying

To stand out, make sure you've researched:

  • → Review ERM's sustainability reports and client case studies to understand the types of projects they support.
  • → Familiarize yourself with ERM's approach to ESG (Environmental, Social, Governance) and how security supports those priorities.
  • → Look into ERM's recent news or press releases about digital transformation or cybersecurity initiatives.
  • → Understand the regulatory landscape for environmental consulting (e.g., GDPR, CCPA, industry-specific compliance).

💬 Prepare for These Interview Topics

Based on this role, you may be asked about:

1 Walk me through how you would handle a client security concern that requires escalation to internal teams.
2 Describe your experience with third-party risk assessments and how you prioritize vendors for review.
3 How have you contributed to maintaining ISO 27001 certification or similar compliance standards?
4 Explain a time you facilitated a business continuity or disaster recovery exercise. What challenges arose?
5 How do you stay updated on emerging security threats and regulatory changes relevant to environmental consulting?
Practice Interview Questions →

⚠️ Common Mistakes to Avoid

  • Failing to demonstrate client communication skills; this role heavily involves interacting with external stakeholders.
  • Overlooking the importance of business continuity; be ready to discuss specific exercises or plans you've been part of.
  • Not tailoring your experience to sustainability or consulting; generic security backgrounds without context may seem less relevant.

📅 Application Timeline

This position is open until filled. However, we recommend applying as soon as possible as roles at mission-driven organizations tend to fill quickly.

Typical hiring timeline:

1

Application Review

1-2 weeks

2

Initial Screening

Phone call or written assessment

3

Interviews

1-2 rounds, usually virtual

✓

Offer

Congratulations!

Ready to Apply?

Good luck with your application to Environmental Resources Management!

← Back to Job Listing Apply Now →