InfoSec Analyst

# InfoSec Analyst - AltoVita

**Location:** London, United Kingdom

**Department:** Engineering

## About the Company

AltoVita is a female-founded scale-up with approximately 100 employees across 26 countries, speaking 29 languages collectively. The company is a multi-award winning accommodation platform that enables enterprises to consolidate accommodation programmes through proprietary technology and a human-centric approach. AltoVita recently closed Series A financing and will be entering Series B rounds. The company operates a network of 10 million+ verified properties across 35,000+ cities in 165 countries worldwide.

##

Key Responsibilities

**Security and Privacy Operations**

• Support day-to-day operation of AltoVita's information security and privacy activities
• Maintain security, privacy and compliance documentation
• Track security and privacy actions, control improvements and remediation activities
• Maintain registers including risks, issues, actions, policies, vendors, assets, data processing activities and control evidence
• Coordinate updates between internal teams to ensure progress on agreed actions
• Prepare security and privacy reports, summaries and updates for internal stakeholders
• Ensure security and privacy activities are documented, repeatable and easy to evidence
• Escalate risks, issues or delays to the CISO or relevant business owner

**Compliance and Audit Support**

• Support internal and external compliance activities including ISO 27001, SOC 2, GDPR and client assurance

requirements

• Gather evidence for audits, assessments and control reviews
• Maintain audit trackers, evidence folders and compliance records
• Coordinate with internal teams to obtain required documentation and control evidence
• Support follow-up actions from audits, assessments or client reviews
• Assist with maintenance of policies, procedures and standards
• Ensure compliance activities are well organised and delivered within agreed timelines
• Support CISO and control owners with audit preparation and remediation tracking

**Policy and Documentation Support**

• Maintain clear, practical and accessible security and privacy documentation
• Review and update information security and privacy policies
• Assist with creation of standards, procedures, guidance notes and user-facing materials
• Ensure documents are version controlled, approved and communicated appropriately
• Maintain policy review schedules and track required updates
• Draft practical guidance for employees on security and privacy topics
• Support communication of policy changes across the business
• Ensure documentation is accurate, consistent and aligned to business processes

**Security Awareness and Culture**

• Carry out security and privacy training administration and ensure 100% completion rates across the business
• Support development of awareness content, reminders, newsletters, FAQs and guidance
• Coordinate phishing simulations and follow-up communications
• Track training completion and awareness participation
• Support campaigns that promote secure behaviours and good privacy practices
• Make security and privacy feel practical, accessible and enabling
• Escalate recurring behavioural or process issues to the CISO or relevant business owner

**Privacy Support**

• Assist with maintenance of privacy records, including data processing registers and related documentation
• Track privacy actions, assessments and improvement activities
• Gather information for privacy reviews, data mapping or data protection impact assessments
• Provide practical privacy guidance to internal teams, escalating complex matters where needed
• Assist with record keeping for data subject requests, incidents or privacy enquiries
• Ensure privacy documentation remains organised, accurate and accessible

**Client Assurance and Security Questionnaires**

• Support completion of client security and privacy questionnaires, RFP responses and due diligence requests
• Prepare responses to client security and privacy questions
• Maintain library of approved answers, evidence and supporting materials
• Coordinate with internal subject matter experts to obtain accurate information
• Ensure responses are consistent with AltoVita's current controls, policies and practices
• Translate technical or compliance information into clear, client-friendly language
• Track open client assurance requests and support timely completion
• Escalate complex, high-risk or contractual questions to the CISO, Legal or relevant business owner

**Supplier and Third-Party Support**

• Assist with supplier due diligence questionnaires and evidence collection
• Maintain supplier records, risk ratings and review schedules
• Track supplier security or privacy actions
• Support periodic reviews of key suppliers
• Ensure supplier documentation is complete and up to date
• Escalate potential supplier risks or concerns to the appropriate owner

**Incident and Risk Support**

• Support security, privacy

Apply directly on RemoteJobs.org: https://remotejobs.org/remote-jobs/infosec-analyst-altovita