Information Technology Security Officer

Location: London or Birmingham, two days per week in the office

Working pattern: Full-time, hybrid

I'm looking for IT Security Officer to support the Information Security Officer and help find and close security gaps across the organisation.

This is a hands-on role covering security tooling, incident response, vulnerability management and risk. You’ll work with IT and the wider business to put controls in place, investigate incidents and make sure security issues are followed through to resolution.

• Maintain security controls and tooling across vulnerability scanning, endpoint security and network monitoring.
• Investigate security alerts and coordinate incident response from containment through to recovery.
• Run vulnerability assessments, coordinate penetration tests and make sure issues are fixed.
• Assess security risks, agree mitigation plans and escape serious issues.
• Help control owners put effective controls in place and provide the evidence to prove they work.
• Set security requirements for projects, infrastructure changes and new technology.
• Support audits and compliance reviews, and keep security processes, policies and incident records up to date.

You’ll need hands-on experience across several of the following:

• Security operations, cyber defence or technical information security.
• Investigating and responding to security incidents.
• Vulnerability management and penetration-testing processes.
• Security tools such as Tenable, endpoint security platforms, vulnerability scanners or network monitoring systems.
• Experience working in London insurance is essential.

You’ll need to investigate technical issues properly, explain risk in plain language and work well with engineers, control owners, risk teams and senior stakeholders.

• Two days per week in either the London or Birmingham office, with the remaining days working from home.
• Sponsorship is not available.
• Three interview stages: two technical interviews and one HR interview.