Information Security Analyst

Our client is a health and life insurance provider. Team – Information Security Working Pattern - Hybrid – 2 days per week in our Bournemouth, London or Stockport Office. Full-time hours apply. We are happy to discuss flexible working!

Top 3 skills needed for this role: Proven security risk assessment Strong regulatory compliance knowledge Skilled stakeholder communication What this role is all about Help us keep our client secure, resilient and ready for what's next.

As an Information Security Analyst, you'll play an important role in protecting our business and member data, identifying security risks and strengthening the controls that keep us secure. Working across teams and projects, you'll provide practical security advice, support our Information Security Management System and help our client stay aligned with recognised security standards and regulatory requirements.

What you will be doing Provide clear and practical information security advice to stakeholders across the business Support the development and continuous improvement of the Information Security Management System to maintain ISO 27001 certification Complete information security risk assessments across business processes, systems and projects, identifying appropriate mitigating controls Conduct internal audits against ISO 27001 requirements and produce clear, evidence-based audit reports Work with project managers to identify and address information security risks throughout the software development lifecycle Develop, implement and maintain information security policies, standards, procedures and processes Support the maturity of Data Loss Prevention, access management and security monitoring capabilities Complete security due diligence on third-party suppliers, including site visits where required Contribute to information security training, awareness activities and wider improvements to our client's security posture Support the investigation and management of information security incidents and associated audit activity What do you need to thrive?

Experience working within an information security role Strong understanding of information security principles, data protection and regulatory compliance Experience completing risk assessments and business impact analyses Working knowledge of ISO 27001, ISO 27002, PCI DSS and other relevant security frameworks Experience developing and implementing information security policies and procedures Ability to conduct internal audits and produce clear audit reports Experience supporting projects throughout the software development l...

Report this job