Information Security Assurance Analyst

Information Security Assurance Analyst

Job Description

Our client is a leading provider of regulated insurance solutions for pensions de-risking. The Information Security team works across the organisation to drive resilience and information assurance across operational, development and business teams. The Information Security Assurance Analyst will join a small team and support senior members with all required day to day operations and assurance activities. This is a high-performing team which helps to deliver exceptional value to the business. You will work with stakeholders at all levels and help to build a world class Information Security function.

Role Responsibilities:

• Support team members with information security assurance activities including ISO27001 and ISO22301 audits
• Support the team in developing and maintaining a robust approach to governance, risk and compliance activities
• Help support the adoption and implementation of security best practices across the enterprise and cloud
• Support the creation of security awareness materials and help coordinate awareness campaigns across the business
• Coordinate security assessments for vendors and become a subject matter expert within the business for all third party risk management activities
• Tracking and reporting of information security controls that maintain the ability to deliver services continuously at all times
• Support the roll-out of key security tools and contribute to creating documentation required for support and maintenance
• Help support the delivery of key day-to-day IT Security Management functions

Technical Skills & Experience

• Excellent knowledge of Information Security and risk management principles
• Experience working with information security standards and frameworks (Cyber Essentials, ISO, NIST, etc.)
• Understanding of key threat vectors and how common attacks work
• Interest in learning new technical skills in order to be able to work with various cyber security tools
• Ability to develop security standards and guidelines based on best practices, regulatory requirements and industry standards
• Self-starter ability to build and maintain productive relationships with key stakeholders

Desirable:

• 3 years Technology Professional Experience
• 1+ year in a similar Information Security role
• Professional Computer/Security systems qualifications
• Previous experience and exposure to cloud technologies such as AWS and Azure

Apply for this role

All fields marked with * are required.