Information Security Analyst

RSM; Crawley; Hybrid; GBP 40,000 - 60,000; Full time

Job summary

A leading professional services firm in Crawley is seeking an Information Security Analyst to develop and maintain a robust information security governance program. The role involves conducting risk assessments, managing compliance with standards like ISO 27001, and promoting a culture of security awareness. Ideal candidates will have experience in information security, excellent organizational skills, and a proactive approach to teamwork.

Benefits

Study Support

Hybrid working

26 days holiday

Health and wellbeing benefits

Access to on-demand courses

Qualifications

• Experience in information security roles, familiar with ISMS.
• Conducting supplier information security reviews.
• Strong organizational skills.

Responsibilities

• Manage the Information Security Management System.
• Conduct risk assessments and identify security threats.
• Monitor compliance with relevant regulations.

Skills

Information security awareness

Supplier security reviews

Organisational skills

Self-motivation

Proactive communication

Job description

Information Security Analyst

Make an Impact at RSM UK

The Information Security GRC (Governance, Risk, and Compliance) Analyst will be responsible for developing, implementing, and maintaining a robust information security governance, risk management, and compliance program. This role involves assessing and managing risks, ensuring compliance with relevant regulations and standards, and promoting a culture of security awareness across the organization.

Responsibilities

• Assisting with the day-to-day management and maintenance of the Information Security Management System including the development and maintenance the current information security policies, standards, and procedures.
• Conducting risk assessments and identify potential security threats and vulnerabilities. This will include risk assessments for projects and new initiatives.
• Assisting with the completion of questionnaires for new and existing clients.
• Conducting supplier assurance activities including conducting visits to existing and new suppliers, conducting due diligence, reviewing new software and services, and assessing existing suppliers.
• Monitoring and ensure compliance with relevant regulations, standards, and frameworks (e.g., ISO 27001, Cyber Essentials Plus).

What we are looking for

We value diverse experiences and perspectives. Here's what we're looking for in our ideal candidate:

• Demonstrable relevant experience and awareness of information security obtained from a previous information security role including the supporting and administering of an ISMS.
• Experience of conducting supplier information security reviews.
• Great organisational skills.
• Self-motivated regarding own development and development of others within the organisation.
• Proactive about dealing with colleagues and clients.

What we can offer you

We recognise that our people are our most important assets. That's why we offer a flexible reward and benefits package that will help you have fulfilling experience, both in and out of work.

• Study Support.
• Hybrid and flexible working.
• 26 days holiday with the option of purchasing additional days.
• Lifestyle, health, and wellbeing including financial wellbeing benefits such as financial tools, electric car scheme and access to a virtual GP.
• Access to a suite of 300+ courses on demand developed by our inhouse talent development team.

Location: LONDON

Department: Technology & Digital Advisory