Information Security Analyst

JR United Kingdom; City of Edinburgh; On-site; GBP 40,000 - 60,000; Full time

Job summary

A small financial services organization in Edinburgh is seeking an experienced Information Security Analyst or Engineer for a 6-month contract. The role involves vulnerability management, assessing reports, and collaborating with teams to ensure security compliance. Candidates should have strong knowledge of security standards and tools, with a preference for local Scottish applicants for a hybrid working approach.

Qualifications

• Recent experience as a Security Analyst, Engineer, or Vulnerability Analyst.
• In-depth knowledge of Information Security standards like ISO27001.
• Ability to work independently and within agile teams.

Responsibilities

• Assess vulnerability reports and collaborate with teams for mitigation.
• Focus on Vulnerability Management using SAST/DAST tools.
• Ensure compliance with security best practices and risk management.

Skills

Vulnerability Management

Information Security Standards

Risk Management

Compliance

Security Best Practices

Communication Skills

Stakeholder Management

Education

CISA

CISM

ISO27001 Lead Implementer/Auditor

Tools

SAST/DAST Tools

Azure DevOps

Tenable

Job description

Job Title: Information Security Analyst or Engineer

A small Edinburgh Financial Services organisation is seeking an experienced Information Security Analyst or Engineer with a strong background in vulnerability management to join their team on an initial 6-month contract.

The contract involves assessing vulnerability reports and collaborating with cross-functional teams to ensure timely mitigation. Key knowledge and experience should include:

1. Recent experience as a Security Analyst, Security Engineer, or Vulnerability Analyst with complex information security projects.
2. In-depth knowledge of Information Security standards, technologies, and methodologies (e.g., ISO27001).
3. Strong understanding of security best practices, risk management, and compliance.
4. Focus on Vulnerability Management using SAST/DAST tools, especially Tenable.
5. Familiarity with Azure DevOps for tracking work items.
6. Ability to work independently and within agile teams.
7. Excellent communication and stakeholder management skills.
8. Formal certifications such as CISA, CISM, or ISO27001 Lead Implementer/Auditor are highly advantageous.

This role offers a hybrid working approach. Our client prefers candidates from the local Scottish market who can commit to regular onsite presence in Edinburgh. If you are interested,

PLEASE APPLY NOW to be considered.

Head Resourcing values diversity and inclusivity. We welcome applications from individuals of all backgrounds, including but not limited to education, socio-economic status, neurodiversity, age, civil status, veteran status, gender, gender identity, sexual orientation, disability, religion, race, and ethnicity. We are committed to providing workplace adjustments to support your application process.