We are looking to recruit an Information Security Analyst to join our existing IT team. Working with the Head of Information Services, you will provide advice and guidance on information security and develop security policies and processes across the entire infrastructure estate.
This role is responsible for supporting and maintaining information-driven solutions within a fast-paced environment. As a member of the IT team, you will review all aspects of the information systems environment and its components. The successful candidate will proactively improve security measures and offer guidance on information security matters.
You should be comfortable with autonomy, as this role is the sole information security employee within the group. You will work closely with the IT team and enjoy responsibilities that suit those with a strong understanding of IT infrastructure and information security in dynamic environments.
Key Duties and Responsibilities
* Assist with information security incident management and response activities
* Support daily security operations, including managing security alerts from systems and end users
* Perform regular security checks, reconciliation, compliance audits, and investigate exceptions
* Complete information security questionnaires and support related processes
* Identify and report security risks to management and the board
* Create and maintain security policies, processes, and procedures
* Develop technical controls to enhance security capabilities against cyber threats
* Monitor and implement systems for security reporting and incident detection
* Document user requirements and create technical training guides
* Manage risk registration processes
* Test disaster recovery plans and improve security resilience
Qualifications and Technical Requirements
* Hands-on experience in information security
* Knowledge of security standards such as Cyber Essentials, ISO 27001/27002, Data Protection Act, and GDPR
* Understanding of IT infrastructure and security testing principles, including vulnerability scanning and risk reporting
* Experience in creating documentation
Knowledge Areas
* Information Security and Threat Analysis
* Incident Management and Response
* Disaster Recovery and Business Continuity
* Event and Log Analysis
Core Behavioral Skills
* Confident interpersonal communication skills, able to simplify technical information for users
* Team player with analytical mindset
* Comfortable working in fast-paced, dynamic environments
* Customer-focused with support experience for demanding users
* Strong organizational and workload management skills
* Ability to report on progress and activities
#J-18808-Ljbffr