Information Security Analyst

nineDots.io; Greater London, Birmingham; Hybrid; GBP 60,000 - 95,000; Full time

Job summary

nineDots.io is seeking an IT Security Officer to identify, assess and close security gaps across the organisation. You’ll work alongside the Information Security Officer with hands-on responsibility for security monitoring, incident response, vulnerability management and technical risk.

This role requires London Market insurance experience and can be based in London or Birmingham. You’ll split time between two office days per week and work remotely for the remainder.

Qualifications

• Experience in London Market insurance sector.
• Hands-on security operations and cyber defence.
• Experience investigating alerts and coordinating the response.
• Ability to explain risks clearly to technical and non-technical stakeholders.

Responsibilities

• Maintaining security controls and tools covering vulnerability scanning, endpoint security and network monitoring.
• Investigating security alerts and coordinating incident response through containment, remediation and recovery.
• Running vulnerability assessments, coordinating penetration tests and tracking findings through to closure.
• Assessing technical security risks, agreeing practical remediation plans and escalating serious risks.
• Working with control owners to implement security controls and gather evidence that they are operating effectively.
• Defining security requirements for projects, infrastructure changes and new technologies.

Skills

Security operations

Incident response

Vulnerability management

Technical risk assessment

Stakeholder communication

Tools

Tenable

Endpoint security

Network monitoring

Job description

Location: London or Birmingham, with two office days per week

The role

We’re hiring an IT Security Officer to help identify, assess and close security gaps across the organisation.

You’ll work alongside the Information Security Officer and take hands-on responsibility for security monitoring, incident response, vulnerability management and technical risk.

This role requires previous experience within London Market insurance. This could include experience with an insurer, broker, managing agent or another organisation operating in the London Market.

What you’ll be responsible for

• Maintaining security controls and tools covering vulnerability scanning, endpoint security and network monitoring.
• Investigating security alerts and coordinating incident response through containment, remediation and recovery.
• Running vulnerability assessments, coordinating penetration tests and tracking findings through to closure.
• Assessing technical security risks, agreeing practical remediation plans and escalating serious risks.
• Working with control owners to implement security controls and gather evidence that they are operating effectively.
• Defining security requirements for projects, infrastructure changes and new technologies.

What you’ll need

• Experience working in the London Market insurance sector.
• Hands-on experience in security operations, cyber defence or technical information security.
• Experience investigating security alerts or incidents and coordinating the response.
• Experience managing vulnerabilities from identification through to remediation.
• The ability to investigate technical issues and explain the resulting risk clearly to technical and non-technical stakeholders.
• The right to work in the UK without employer sponsorship.

Useful, but not essential

• Experience with Tenable or another vulnerability-scanning platform.
• Experience with endpoint security or network-monitoring tools.
• Experience coordinating penetration tests.
• Experience supporting audits, risk reviews or control-assurance work.

The role can be based in London or Birmingham. You’ll attend your chosen office two days per week and work remotely for the remainder.

The process has three stages:

• Initial technical interview.
• Final technical and stakeholder interview.
• HR conversation.