Information Security Analyst
 
 
Role Purpose
To support the development and communication of information security policies which ensure our clients networks and information systems are protected from risk and unauthorised access. To coordinate and drive the development and implementation of consistent security standards and processes across the group.

 
Accountabilities

- Contribute to the development and communication of information security policies and monitor on-going compliance   
- Co-ordinate and drive development and implementation of consistent security standards and guidelines across the group in line with policy
- Manage the process to manage and maintain information security policies and standards on an ongoing basis
- Develop and operate the group information cyber security awareness and training programme
- Identify and manage information security requirements and engage with other areas to establish information security requirements arising from legal or regulatory requirements
- Analyse and manage exceptions to information security policy, and ensure policy is relevant to the on-going achievement of our clients objectives
- Provide advice and guidance in respect of information security requirements and policy
- Monitor emerging security threats and developments to identify requirements for new or changed policies
- Maintain the performance of the BAR processes, improve data integrity in IAM and enhance the JML process
- Manage Statutory & Regulatory IT Audit as the primary escalation contact and work with relevant stakeholder to close identified risks
- Represent IT Security during ISO Audits ensuring that the evidence for information security is up to date and in line with expectations
- Monitor and ensure effective operation of security related activities undertaken within other areas (e.g. access management, patching etc. management of Endpoint Protection & Endpoint Encryption
- Compile and produce information security and compliance reports and metrics
- Participate in CSIRT (Cyber Security Incident/threat Response Team) planning or response activity as required in cases of major security threats or incidents
- Test and evaluate security products

Role Specific Skills

- Broad knowledge and experience of information security policies, processes, and best practices
- Strong knowledge of network and information security standards
- Ability to communicate with system administrators and other technical staff regarding security standards
- Minimum of 3 – 5 years relevant experience required
- Understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts
- Understanding of patch management
- Experience of developing or delivering security awareness materials
- Previous experience in information security management activities
- Working knowledge of relevant industry standards (eg ISO27000)
- Security certification (eg CISSP, CCIE) an advantage
- Relevant 3rd level degree

Email me jobs like this