Digital Security - Security Assurance Analyst

DS Smith; Milton Keynes; On-site; GBP 40,000 - 60,000; Full time

Job summary

A leading sustainable packaging provider is seeking a Security Assurance Analyst to enhance their Security Team. The role focuses on risk management, compliance assurance, and developing security policies within a dynamic, fast-paced environment. Candidates will need to engage with stakeholders across various business functions to maintain security and compliance.

Benefits

Competitive salary

Company bonus

Pension scheme

Life assurance

Income protection

25 days holiday plus bank holidays

Electric car scheme

Annual Cycle to Work Scheme

Qualifications

• Experience in interpreting information assurance and security policies.
• Planning and conducting information assurance across complex domains.
• Validating systems for compliance with security policies.

Responsibilities

• Provide assurance on security features and practices.
• Identify security risks and report on them.
• Maintain documentation related to information security.

Skills

Risk management

Information assurance

Security policies adherence

Monitoring security operations

Vulnerability assessment

Job description

Digital Security - Security Assurance Analyst

About the role

Here at DS Smith, a multi-national sustainable packaging provider, we are looking for a Security Assurance Analyst to join our growing Security Team.

The mission of the I&T Digital Security organisation is to deliver an efficient and effective service that has scalability and flexibility to support the demands of a FTSE 100 business.

Supporting Head of Information Security Architecture and Assurance as well as working closely with key stakeholders including Head of Governance, Risk and Compliance, Digital Security, IT and business teams you will focus on core areas such as risk management and security due-diligence reviews ensuring compliance with legal, regulatory and relevant security policies and best practices.

In this position you will provide assurance and guidance that the security features, practices, procedures, and architecture of an information system accurately mediates and enforces the security policies.

Visibility and the ability to build close working relationships with Information & Technology (I&T) team members, business stakeholders as well as external partners is essential. This will require some 'on site' visits, on a planned basis.

The role demands business insight, technical acuity, and the ability to think, communicate and write at various levels of abstraction

About you

You will have experience in -

• Interpreting information assurance and security policies and applies these to manage risks.
• Providing advice and guidance to ensure adoption of and adherence to information assurance architectures, strategies, policies, standards and guidelines.
• Planning, organising and conducting information assurance and accreditation of complex domains areas, cross-functional areas, and across the supply chain.
• Validating operating systems, networks, software, and hardware are protected and compliant with organisation's policies.
• Identifying security risks and producing effective reports to articulate and report those risks along with proposed remediations in appropriate risk forums.
• Engaging with information security operations to maintain acceptable levels of control and risk throughout the business.
• Contributing to the development and implementation of robust set of policies, standards and guidelines.
• Maintaining relevant documentation related to information security.
• Supporting monitoring of the external environment and assessment of emerging technologies.
• Identifying risks and vulnerabilities, assesses their impact and probability, develops mitigation strategies and reports to the business.
• Conducting formal assessments or reviews for given domain areas, suppliers, or parts of the supply chain. Collating and examining records, analysing the evidence and drafts all or part of formal compliance reports.
• Determining the risks associated with findings and non-compliance and proposes corrective actions

Benefits

• Competitive salary
• Company bonus
• Pension scheme
• Life assurance
• Income protection
• 25 days holiday plus bank holidays
• Electric car scheme
• Annual Cycle to Work Scheme

Reading, Cambridge, Luton, Southampton, UK

Reading, Cambridge, Luton, Southampton, UK