Job Description We have an incredible opportunity for an Information Security Analyst to join us in either Cardiff, Hove or Solihull! You’ll play a key role in providing the technology expertise required to implement and support the information and cyber security strategy, policy and standards in our Retail division. Working in close collaboration with risk, audit, and technology reams, you’ll reduce and mitigate Information Security risks according to an agreed risk appetite. Perhaps you come from a technical background and you’re looking for a move into governance? If so, this could be the ideal opportunity for you! What you'll be doing: Supporting the Information Security Manager and other key stakeholders in securing the information assets of the UK Protection business Providing technical security consultancy to internal projects and key system enhancements, ensuring IT security best practice is adhered to and that key company projects are compliant with IT security policies, driving continual improvement throughout the project lifecycle Working on the security architecture of the estate alongside the IT Operations Teams, driving for secure-by-design solutions Assisting with penetration tests, firewall rules and remediation activities, carrying out audits and risk assessments in line with group, external and internal IT security audit schedules Maintaining and updating the information security controls in place within the estate in line with risk appetite and governance Managing and calibrating security tooling to maximise effectiveness of uptake and use across the estate Supporting implementation of appropriate governance, reporting and escalation of changes impacting customers to ensure key checkpoints are met in line with stakeholder and business requirements Ensuring any system or process changes that impact customer journeys have been reviewed by business stakeholders to determine the impact of the changes on the delivery of customer outcomes