Information Security Analyst (Risk and Assurance)

Job title: Information Security Analyst (Risk and Assurance) Location: London (Hybrid) Salary: £60k + Benefits and Bonus Function Fantastic career opportunity join highly respected UK bank and specialist lender. The role requires technical expertise to support protecting the Bank, its customers and its data from cyber and information security risks through effective governance, risk management, assurance and operational security support.

Key Responsibilities Governance, Risk and Compliance Maintain the security risk register, treatment plans and exceptions Run risk assessments on systems, projects, suppliers and emerging technology Keep policies, standards and control mappings current Produce GRC management information for governance forums Audit and Control Assurance Plan the annual audit and assessment calendar Coordinate audits end to end and liaise with auditors Test internal controls and document findings Own the findings tracker and evidence repository SWIFT CSP Own the annual attestation and KYC-SA submission Manage the independent assessor and control owners Monitor SWIFT scope and architecture, and track gap remediation Cyber Essentials Plus Deliver the annual renewal, including technical testing and remediation Monitor scheme changes and ongoing compliance Framework Alignment (ISO 27001, NIST CSF) Evidence alignment and run gap and maturity assessments Produce alignment statements for clients and auditors No formal ISO 27001 certification held or sought PCI DSS Maintain scoping, segmentation and the annual assessment cycle Coordinate ASV scans and penetration testing Complete attestations with acquirers and assessors Vulnerability Management and Security Testing Validate scan coverage, track remediation and report metrics Coordinate penetration testing through to retesting Security Monitoring and Incident Response Monitor alerts and log-source health Triage incidents and keep records and timelines Support lost or compromised device response Maintain playbooks and procedures Threat Intelligence Monitor advisories, lookalike domains and exposed credentials Assess relevance and escalate material findings Security Platforms, Email Security and DLP Administer delegated platform functions Monitor tool h...

Report this job