Social network you want to login/join with:
Information Security Analyst, hemel hempstead
Client: Cloud Decisions
Location: hemel hempstead, United Kingdom
Job Category: Other
-
EU work permit required: Yes
Job Views: 5
Posted: 31.05.2025
Expiry Date: 15.07.2025
Job Description:
Upto £57,500 + Enterprise Benefits (Life Ins/Medical/Pension)
Fully Remote (UK only)
***Please Note: NOT A CYBER SEC TECHNICAL ROLE***
Be part of their high growth Information Security plans as they build the team to x4
Cloud Decisions have partnered with one of the UK’s most exciting enterprise technology transformations: a £multi-billion, employee-owned group, one of the top 10 largest employee-owned businesses in the UK, and one of the largest global players in insurance across 100+ countries.
Following a wave of acquisitions and continued digital modernisation and compliance, they’re hiring an Information Security Assurance Analyst who understands Controls & Compliance with security regulations and standards, and can work in a small, high-trust team. The role involves building InfoSec capability to ensure regulatory compliance, information security maturity, and readiness for audits, tenders, or risk reviews.
Control/Compliance Assessment Duties:
* Schedule and Coordinate Assessments: Coordinate control assessments with control owners, asset custodians, and third parties.
* Evaluate Controls: Assess the design and effectiveness of security controls against policies, standards, and procedures.
* Documentation Maintenance: Keep documentation of assessments and remediation activities up to date.
* Organise Control Evidence: Ensure all control evidence is well-organised and accessible.
* Notify Deviations: Notify relevant parties of process deviations.
* Risk Analysis Reports: Produce reports on the impact of control gaps on risks.
* Communicate Findings: Share issues with security leadership clearly.
* Dashboard and Reporting Input: Update dashboards and databases with current details.
* System Security Plans (SSPs): Support documentation of security requirements for information systems, including controls testing and ongoing monitoring.
Compliance/Control Improvement Duties:
* Update Processes: Coordinate updates to business processes.
* Enhance Procedures: Assist in documenting and designing procedures and tests.
* Propose Enhancements: Recommend improvements to controls and procedures.
* Reporting Support: Assist in reporting on assessment activities.
Audit/Assessment Duties:
* Third-Party Due Diligence: Manage due diligence requests, ensure timely responses, and document deficiencies.
* Audit Preparation and Support: Prepare evidence and respond to audit requests.
InfoSec Effectiveness - Collaboration/Continuous Improvement:
* Continuous Improvement: Identify and implement process improvements.
* Training and Development: Assist in training team members and stakeholders.
* Vendor Management: Ensure vendors have robust BCDR plans and conduct assessments.
Knowledge of DORA, PCDSS, SARBOX is beneficial but not essential.
#J-18808-Ljbffr