InfoSec Security Analyst

Role Overview

The Information Security Analyst will be responsible for assuring information security and managing risks related to how the organization uses, processes, and stores data. They will act as a bridge between technical security requirements and business operations, ensuring that systems and processes remain compliant and secure. They will be responsible for the collection, processing, preservation, analysis, and presentation of evidence in support of information security activities.

Responsibilities

• Compliance & Frameworks: Maintain and improve security solutions that comply with all applicable policies, standards, and regulatory frameworks;
• Security Documentation: Author and update critical documentation, including policies, standard operating procedures, and system security plans;
• Compliance & Frameworks: Establishes, implements, and maintains information assurance programs, requirements, and standards based on the analysis of user, policy, customer, regulatory, and resource demands;
• Security Assurance: Analyzes information assurance-related technical problems and provides engineering and technical support for solving these problems. Identifies, reports, and assists with resolution of security violations;
• Audit & Reporting: Facilitate analysis and store artifacts to respond to audits, ensuring the organization meets regulatory demands;
• Security Awareness: Ensure that employees and third parties understand and fulfill their security responsibilities;
• Metric Analysis: Compile and analyze data for management reporting and metrics to track the health of the security program;

Risk Consultancy: Analyze the impact of new threats and communicate risks to relevant business units, helping them understand the trade-offs between risk mitigation and business performance.

Requirements

• Bachelor's degree (or relevant professional certification) with less than 1 year relevant work experience, OR 1 year relevant work experience;
• Self-motivated and possessing of a high sense of urgency and personal integrity;
• Instinctive and creative with the highest ethical standards and values;
• Excellent investigative skills, problem-solving, insatiable curiosity, and an innate drive to win;
• Good understanding of system security vulnerabilities and remediation techniques for identity, authentication, authorization, data, and access controls;
• A strong commitment to delivering high-quality, prompt service while understanding the organization's mission and goals;
• Analytical mindset. An ability to identify and assess the severity and potential impact of risks and communicate to risk owners outside Information Security, in a way that consistently drives objective, fact-based decisions about risk that optimize the trade-off between risk mitigation and business performance;
• Technical expertise in following industry best practices and standards in digital evidence acquisition, handling, and documentation;
• An ability to work with regulatory guidances, information security frameworks, internal policies, and standards;
• An ability to perform independent analysis of complex problems and distill relevant findings and root causes;
• Willingness to learn and to keep-up-to-date with security industry news.

Skills

• Effectively influence others to modify their opinions, plans, or behaviors;
• Practical knowledge with identity and access security, content filtering, firewalls, vulnerability scanning, and anti-malware;
• Good understanding of system and network security, authentication and security protocols, cryptography, and application security;
• Good decision-making capabilities, with an ability to learn the relative costs and benefits of potential actions and identify the most appropriate one aligned with policies and standards.

Tech Stack

• Firewalls

Benefits

• Competitive salary
• Hybrid working
• Rentokil Initial Reward Scheme
• 23 days holiday, plus 8 bank holidays
• Employee Assistance Programme
• Death in service benefit
• Healthcare
• Free parking