Digital Security - Security Assurance Analyst

DS Smith; Greater London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading sustainable packaging provider in Greater London is seeking a Security Assurance Analyst to support their Security Team. The role involves ensuring compliance with security policies, managing risks, and validating security measures across various platforms. Ideal candidates will have strong analytical skills, experience in information security, and the ability to communicate effectively at different levels. The position offers competitive salary and benefits including a company bonus and pension scheme.

Benefits

Competitive salary

Company bonus

Pension scheme

Life assurance

Income protection

25 days holiday plus bank holidays

Electric car scheme

Annual Cycle to Work Scheme

Qualifications

• Experience in interpreting security policies and managing risks.
• Ability to engage with information security operations.
• Experience in conducting information assurance and accreditation.

Responsibilities

• Provide assurance and guidance on security features and practices.
• Plan and conduct information assurance across the supply chain.
• Identify risks, produce reports, and propose remediations.

Skills

Information assurance and security policies

Risk management

Security compliance

Technical acuity

Report writing

Job description

About the role

Here at DS Smith, a multi‑national sustainable packaging provider, we are looking for a Security Assurance Analyst to join our growing Security Team.

The mission of the I&T Digital Security organisation is to deliver an efficient and effective service that has scalability and flexibility to support the demands of a FTSE 100 business.

Supporting Head of Information Security Architecture and Assurance as well as working closely with key stakeholders including Head of Governance, Risk and Compliance, Digital Security, IT and business teams you will focus on core areas such as risk management and security due‑diligence reviews ensuring compliance with legal, regulatory and relevant security policies and best practices.

In this position you will provide assurance and guidance that the security features, practices, procedures, and architecture of an information system accurately mediates and enforces the security policies.

Visibility and the ability to build close working relationships with Information & Technology (I&T) team members, business stakeholders as well as external partners is essential. This will require some "on site" visits, on a planned basis.

The role demands business insight, technical acuity, and the ability to think, communicate and write at various levels of abstraction.

About you

You will have experience in:

• Interpreting information assurance and security policies and applies these to manage risks.
• Providing advice and guidance to ensure adoption of and adherence to information assurance architectures, strategies, policies, standards and guidelines.
• Planning, organising and conducting information assurance and accreditation of complex domains areas, cross‑functional areas, and across the supply chain.
• Validating operating systems, networks, software, and hardware are protected and compliant with organisation's policies.
• Identifying security risks and producing effective reports to articulate and report those risks along with proposed remediations in appropriate risk forums.
• Engaging with information security operations to maintain acceptable levels of control and risk throughout the business.
• Contributing to the development and implementation of robust set of policies, standards and guidelines.
• Maintaining relevant documentation related to information security.
• Supporting monitoring of the external environment and assessment of emerging technologies.
• Identifying risks and vulnerabilities, assesses their impact and probability, develops mitigation strategies and reports to the business.
• Conducting formal assessments or reviews for given domain areas, suppliers, or parts of the supply chain. Collating and examining records, analysing the evidence and drafts all or part of formal compliance reports.
• Determining the risks associated with findings and non‑compliance and proposes corrective actions.

Benefits

• Competitive salary
• Company bonus
• Pension scheme
• Life assurance
• Income protection
• 25 days holiday plus bank holidays
• Electric car scheme
• Annual Cycle to Work Scheme