Information Security Analyst
Must-have:Security
Nice-to-have:Hybrid
About the company
Ready for your next step in information security? This is a chance to join a growing team at a well-known UK health and life insurer, learn from experienced people, and work on things that protect millions of members' data.
Your tasks
- Helping maintain and improve the ISMS so ISO 27001 certification is kept
- Running internal audits against ISO 27001
- Carrying out risk assessments on business processes, systems and projects
- Helping mature Data Loss Prevention and Access Management
- Working with project managers so security risks are picked up through the SDLC
- Writing and maintaining security policies, standards and procedures
- Carrying out security due diligence on third-party suppliers, including site visits
- Supporting security awareness, audits and incident management
Requirements
What you will bring
- A couple of years in information security, IT risk, governance or compliance
- A solid understanding of ISO 27001 (essential)
- Experience of risk assessments and security policies
- Knowledge of data protection and regulatory requirements (FCA, ICO)
- Clear communication, with the ability to explain technical points simply
- CISSP, CISA or CRISC, or the drive to study for one (an ISACA qualification would be ideal)
- Desirable: ISO 27001 implementer or auditor, ITIL Foundation, financial services or insurance experience
What we offer
Why this one
- A growing team with real investment behind it
- Room to develop and support towards professional qualifications
- Broad exposure across risk, audit, DLP, access management and suppliers
- A simple two-stage process, with offers before Christmas
How to apply
Interested? Apply here or message me for a confidential chat.
Hannah Ford, Maru Search
Other
Information Security Analyst Up to £50,000 + 8% bonus | Bournemouth (Hybrid) | Permanent