Information security & digital operational resilience analyst

Hybrid role to be based in our Edinburgh office.

About us

Seccl is the Octopus-owned embedded investment platform that’s on a mission to helping more people to invest – and invest well.

We’re B-Corp certified with an amazing product-market fit, impressive early traction and the potential to transform an outdated industry, for the better. We've been growing fast and will scale even faster over the next few years.

We’re also proud to be part of Octopus, the £multi billion group that's on a mission to breathe new life into broken industries, through companies like Octopus Energy, Octopus Investments and Octopus Money.

Check out the Seccl website for the latest on our products and our mission to shape the future of investments.

The role

Looking to start or build your career in information security and digital operational resilience?

We’re looking for an Information security and digital operational resilience analyst to join our Governance, Risk and Compliance team. You’ll report into our Head of Information security and data protection officer, who’ll support your development and help you build your knowledge as you grow into the role.

You’ll be part of our 2nd Line of Defence team, helping Seccl protect its people, customers, systems and operations. You don’t need to come with lots of technical experience. What matters most is that you’re curious, proactive, a strong communicator and keen to learn.

Over time, you’ll develop valuable knowledge across cybersecurity, technology risk and operational resilience, with the opportunity to become a subject matter expert in how we keep Seccl’s important services running safely and reliably.

On a typical day you will…

• Help assess how technology is used across different teams and departments

• Support information security and operational resilience governance

• Help facilitate information security risk assessments

• Support digital operational resilience initiatives

• Review incident response plans

• Help with business continuity and disaster recovery assessments

• Conduct due diligence assessments

• Maintain our Information Security Management System

• Keep an eye on regulatory developments, including GDPR and DORA

• Help promote information security and operational resilience awareness across Seccl

This role’s for you if...

• You’re a strong communicator who enjoys building relationships and working with people from different backgrounds

• You’re interested in how organisations manage risk, respond to disruption and keep important services running

• You’re comfortable being a first point of contact and helping people find the right answer

• You have a genuine interest in information security, technology, resilience or risk

• You’re proactive and happy to take initiative, rather than waiting to be told what to do

• You’re curious, motivated and keen to learn

• You enjoy solving problems, asking good questions and working with others

• You’re open to learning technical concepts and applying them in a real business setting. We’ll support you with the training you need

This role isn’t for you if...

• You rely on a lot of top-down direction. Here, you’ll have a lot of freedom and ownership of your role, and you’ll be expected to shape your own progression

• You’re not comfortable working in a fast-paced environment. Our speed and scalability are what set us apart; you need to be able to act quickly and think on your feet

• You struggle to follow through on ideas. We value people who do what they say they will. If you care about something, you have the freedom here to make it happen

• You don’t like change. You’ll get on great here if you relish the ambiguity of rapid growth and are willing to embrace uncertainty

What’s in it for you…

We offer a generous mix of benefits for the things that really matter to our people, including:

A salary between £32,000 and £40,000 – dependant on experience + reviewed annually

27 days holiday + bank holidays (some can be flexible) + day off on your birthday + three days (full time) per year for Dependant leave

Two volunteering days per year

Option to work abroad for up to six weeks a year

Secclbrate - our recognition programme that offers a mix of flexible rewards including extra pay, additional holiday and increased learning budget

Length of service award – one month paid sabbatical at eight years

✅ 6% employer pension contribution, and life assurance

Private medical insurance with AXA Health

Enhanced Parental leave

MacBook and up to £500 home office set up budget

£750 per person learning budget

Health and wellbeing initiatives including free therapy via Wellness Cloud, mental health support via Headspace

Strong financial wellbeing focus including access to Octopus Money, Octopus Share Incentive Plan and will writing offering via Octopus Legacy

Perkbox – Flexi-points giving you a range of discounts and perks including free weekly coffee, gym and retail discounts

Access to initiatives like Cycle to Work and Octopus Electric Vehicle Leasing

Our culture

We're proud to put people first, creating a culture where we truly listen to what matters most to them. Our transparent and inclusive environment encourages diversity of thought, challenge and experimentation.

Check out our Glassdoor page for the latest reviews or our LinkedIn for company updates and insights from the team.

Interview process

Interviewing is a two-way thing, and we want you to have the time and opportunity to get to know us, as much as we are getting to know you. Our interviews are conversational, so come with questions and be curious. In general, you can expect the interview process to look a bit like this, (following an initial chat with one of our Talent team):

• First stage – one-hour competencies-based interview with the hiring manager and another member of the team

• Second stage – 30 minute team focused interview with the Chief risk officer and Head of operational resilience

   

⏳ We’ll only close this role once we have enough applications for the next stage. Please submit your application as soon as possible to make sure you don’t miss out and you should expect to hear back from us within one to two weeks of applying.

Our aim is to build a diverse and inclusive company of awesome people, with unique skills, passions and experiences. All applicants will be considered for employment without attention to age, ethnicity, religion, sex, sexual orientation, gender identity, family or parental status, national origin, or veteran, neurodiversity or disability status.

If this sounds like your kind of thing, we encourage you to apply even if you don’t tick every box. We’d love to hear from you!