Information Security Analyst

Ready for your next step in information security? This is a chance to join a growing team at a well-known UK health and life insurer, learn from experienced people, and work on things that protect millions of members' data.

• Helping maintain and improve the ISMS so ISO 27001 certification is kept
• Running internal audits against ISO 27001
• Carrying out risk assessments on business processes, systems and projects
• Helping mature Data Loss Prevention and Access Management
• Working with project managers so security risks are picked up through the SDLC
• Writing and maintaining security policies, standards and procedures
• Carrying out security due diligence on third-party suppliers, including site visits
• Supporting security awareness, audits and incident management

• A couple of years in information security, IT risk, governance or compliance
• A solid understanding of ISO 27001 (essential)
• Experience of risk assessments and security policies
• Knowledge of data protection and regulatory requirements (FCA, ICO)
• Clear communication, with the ability to explain technical points simply
• CISSP, CISA or CRISC, or the drive to study for one (an ISACA qualification would be ideal)
• Desirable: ISO 27001 implementer or auditor, ITIL Foundation, financial services or insurance experience

• A growing team with real investment behind it
• Room to develop and support towards professional qualifications
• Broad exposure across risk, audit, DLP, access management and suppliers
• A simple two-stage process, with offers before Christmas