Information Security Analyst

Excited to grow your career? Our purpose is to empower people to save and invest with confidence. We are looking for great people to join us, so please come and invest in YOUR future at HL.

We know that sometimes people can be put off applying for a job if they don't tick every box. If you're excited about working for us and have most of the skills or experience we're looking for, please go ahead and apply. We'd love to hear from you!

Due to the expansion of our Information and Security Office we have a fantastic opportunity available for an Information Security Analyst. This is a dual role with a focus on the development and execution of our BAU security testing strategy, as well as Information Security Governance, Risk & Compliance. You will plan, coordinate, and arrange the execution of the security testing activities to protect our information systems and assets.

This is an exciting opportunity to collaborate with diverse sets of teams, including security operations, vulnerability management, development, and infrastructure as well as third party security partners, to identify vulnerabilities and ensure compliance with regulatory requirements are met.

As an Information Security Analyst, you will be supporting the senior Information Security team in ensuring that key information security risks across all of HL group are identified and considered with the CISO's cyber strategy. This requires a mixture of technical, and non-technical information security risk experience.

• Facilitating the co-ordination of the ongoing BAU Security Testing program against HL systems with multi team input.
• Engaging with third-party stakeholders.
• Reviewing testing reports and log findings to the Vulnerability management team.
• Following the Security Risk Assessment process to assess security risk within HL across multiple business processes, functional areas, and IT systems.
• Participating in a cyber security awareness and training program.
• Assisting with on-going compliance and third-party security audits such as pen tests and PCI-DSS.

• Previous experience in an Information Security, Security Testing co-ordination or similar role. Ideally in a regulated environment, such as the finance sector.
• Must be certified to basic security standards, for example SSCP, COMPTIA Security+.
• Have a good understanding of security across - policy, culture, forensics, incident response and risk management. Have practical work-based experience.
• Good exposure to security risk management in a ISO
  27001 or NIST aligned environment.
• Be able to understand both technical and non-technical security controls, and how they are applied in a business context.
• Good exposure to assessing the adequacy of security controls, and some exposure to designing security controls, with a specific focus on threat and vulnerability.
• Experience in the co-ordination of activities across multiple teams driving to ensure a positive outcome.

The interview process for this role will be two stages.

This role is based in Bristol head office, BS1 5HL
. This role is permanent, full time, 37.5 hours per week, Monday to Friday. We have returned to the office, however for this role we offer a hybrid flexible working pattern to enable you the option of working from home and coming into the office. Ideally around 2 days a month in the office.

The salary on offer is circa £40,000 per annum, depending on experience.

Here at HL, we're the UK's number 1 investment platform for private investors, based in Bristol. For more than 40 years we've helped investors save time, tax and money on their investments.

To achieve our mission, we believe we have a workplace like no other, with constant learning, dynamic teams, and a great ethos. We're steered by core values that promote service, quality, innovation, and opportunity in everything we do.

• Discretionary annual bonus* & annual pay review
• 25 days
  * holiday plus bank holidays and 1-day additional Christmas closure time
• Option to purchase an additional 5 days holiday per year at annual enrolment
• Flexible working options available, including hybrid working
• E…