Information Security Analyst

Edgewell Supply Chain; Chadderton; Hybrid; GBP 40,000 - 55,000; Full time

Job summary

A leading security firm is looking for an Information Security Analyst based in Oldham, Greater Manchester. This permanent role involves managing information and cyber security controls across Europe. Candidates should have 1-2 years of experience in implementing cybersecurity practices and possess relevant certifications such as ISO27001 or CISSP. The role is hybrid, offering both autonomy and support in a dynamic environment with significant interaction with all organizational levels.

Qualifications

• 1-2 years experience in implementing ISMS and cybersecurity best practices.
• Understanding of GDPR framework and best practices.
• Broad knowledge of current cybersecurity threats and technologies.
• Familiarity with IaaS, SaaS, and PaaS for systems and networks.
• Experience with ITIL service management processes.
• Proficient in Qualys Vulnerability Scanning.
• Diverse technology experience including private and public clouds.

Responsibilities

• Create and maintain policies, standards and templates based on ISO27001, CIS and NIST.
• Plan for disaster recovery and create contingency plans for security breaches.
• Act as DPO Ambassador liaising with stakeholders and working on ROPAs.
• Conduct coordinated analysis of vulnerabilities and remediation.
• Investigate security alerts and provide incident responses.
• Maintain identity and access management.
• Liaise with stakeholders up to C-level about cybersecurity issues.

Skills

Implementing ISMS and cybersecurity best practices

Awareness of GDPR

Cybersecurity threat landscape understanding

Knowledge of physical, virtual and cloud architectures

Good knowledge of ITIL processes

Qualys Vulnerability Scanning

Education

Recognized Information Security qualification (Security+, CISSP or similar)

Tools

Networking technologies (Cisco, Fortinet)

Microsoft and Linux

Job description

About the job Information Security Analyst

Information Security Analyst

Permanent

Oldham, Greater Manchester (Hybrid)

We have a very exciting opportunity for an Information Security Analyst based at our client site in Oldham, Greater Manchester. This is a fantastic role managing our client's Information and Cyber Security Controls and procedures across Europe.

Reporting to the CISO & Head of IT, the role will require in-depth understanding of Information Security, technology architecture and business security. This is a great opportunity for someone looking to further establish their IT Security knowledge and skills in an environment that provides autonomy and support in equal measure.

Role

• To create, administer & maintain policies, standards and templates, following ISO27001, CIS and NIST best practises; creation and upkeep of Incident Response Plans, Disaster Recovery, Business Continuity, along with the planning and execution of tabletop exercises to test the robustness of these policies.
• Plan for disaster recovery and create contingency plans in the event of any security breaches.
• Act as DPO Ambassador for the group DPO; liaising with stakeholders across the business, aiding in the creation ROPAs and engaging with the Bpost privacy network group.
• Coordinated analysis of identified vulnerabilities and patch releases to ensure a risk-based approach is taken for remediation.
• Investigate security alerts and provide incident response.
• Monitor and maintain identity and access management.
• Liaise with stakeholders, up to C-level in relation to cyber security issues and provide future recommendations.

Experience

• 1-2yrs experience of implementing ISMS and cybersecurity best practises and certifications such as ISO27001, Cyber Essentials, NIST, CIS or PCI.
• Awareness of GDPR (General Data Protection Regulation) framework and best practises.
• A broad understanding of the current cybersecurity threat landscape, existing and emerging technologies.
• An understanding of the principles of physical, virtual and cloud architectures (IaaS, SaaS, PaaS) for systems and networks.
• Good knowledge of ITIL service management processes.
• Qualys Vulnerability Scanning.
• Recognised Information Security qualification (Security+, CISSP or similar).
• A broad range of technology experience (Private and Public cloud Infrastructure, Networking (Cisco, Fortinet), Microsoft, Linux etc).