Information Security Analyst; FTC)

• Full-time
• Permanent/Regular or Fixed Term Contract/Temporary:
  Fixed Term Contract (UK and ROW) / Temporary (US)
• L&G Business Unit:
  Legal & General Retirements Institutional
• L&G sub Business Unit: INSTITUTIONAL RETIREMENTS
• Primary
  
  Location:
  
  Hove, One City Park
• Job Family: IT & Change

Legal & General (L&G) is a leading UK financial services group and major global investor.

We’ve been safeguarding people’s financial futures since 1836, and strive to build a better society, while improving the lives of our customers and creating value for shareholders.

We are one of the world’s largest asset managers and provide powerful asset origination capabilities. Together, these underpin our retirement and protection solutions: we are an international player in pension risk transfer, in UK and US life insurance, and in UK workplace pensions and retirement income.

L&G Institutional Retirement looks after around 700,000 institutional customers who have their retirement benefits secured with us. Operating continuously in the UK market from our entrance in 1987, we are the UK’s longest-running insurer.

Our Institutional Retirement business is the UK’s longest-serving active bulk annuity provider.

Institutional Retirement is the only insurer to have been operating continuously in the UK market from our entrance in 1987 to the present day. Our UK retirement annuity book stands at an estimated £86.1 billion at 31 December 2023.

Across our retail and institutional retirement businesses, we look after more than 1 million customers, around c.700,000 of whom are institutional customers who have had their retirement benefits secured with us.

We’re looking for an Information Security GRC Analyst to help strengthen our approach to information and cyber security across our Retirement Retail and Investment business areas. Working collaboratively with technology teams and business stakeholders, you’ll support the effective management of security risks and controls, drawing on recognised frameworks including ISO 27001 and NIST.

This is an excellent opportunity for someone who enjoys analysing complex information, developing practical solutions and contributing to a supportive and inclusive team. You don’t need to meet every requirement listed below. If you have relevant transferable skills and are motivated to develop your career in information security, we’d love to hear from you.

• Interpreting security policies, standards and control requirements and translating them into practical architecture patterns and solution designs
• Advising project managers, developers and other stakeholders on security controls and good practice
• Monitoring current and emerging security risks and recommending proportionate solutions
• Supporting the assessment of vulnerabilities identified through application and infrastructure security scans
• Collaborating with technical teams to review findings, compensating controls and risk ratings
• Evaluating third-party suppliers’ security maturity and supporting due diligence, tender and contract reviews
• Reviewing system and solution configurations, identifying security issues and recommending improvements
• Supporting the scoping of penetration tests and assessing and documenting the resulting findings

• An understanding of information security principles and controls, including areas such as encryption, identity and access management and security information and event management
• Experience gained within an IT, technology, information security, risk or business-focused environment
• Strong analytical and judgement skills, with the ability to assess information and recommend practical solutions
• Clear written and verbal communication skills, with…