Information security Analyst

Asset Inventories; Greater London; On-site; GBP 55,000 - 75,000; Full time

Job summary

Asset Inventories, Inc. in London seeks an Information Security Analyst to join the on-site team.

You will support the Firm’s global security posture, apply cybersecurity best practices, and work with tools for incident management, vulnerability handling, and compliance across departments. The role requires a 2+ year background in information security, familiarity with scripting (PowerShell, Python), and experience with enterprise security tools.

Qualifications

• Bachelor's degree in Computer science, Information security or an equivalent degree or experience.
• 2+ years of working in a Information security or information technology role.
• Hands-on experience with enterprise security tools such as antimalware, vulnerability scanners, centralized log correlators, firewalls/web proxies, mobile device management, Microsoft 365 solutions, and governance risk and compliance solutions.
• Strong understanding of security best practices across diverse technologies and conducting independent research to fill in gaps in knowledge.
• Familiarity with scripting languages such as PowerShell, Python, etc. strongly preferred.
• Familiarity with security frameworks or cybersecurity regulations preferred.
• Information security certifications (ICS2,SANS GIAC, vendor certifications) preferred.

Responsibilities

• Monitor security tools, logs, and user reports for potential security issues and run local or global security incident management as needed.
• Assist in the vendor cybersecurity due diligence program for onboarding new vendors and recertifying existing vendors on a regular basis.
• Evaluate new and existing applications and cloud products for security concerns and recommend mitigations.
• Create and update standard operating procedures, training content, technical documentation, and security guidelines and standards, and ensure that the Firm’s employees, technology, and services are compliant with its standards.
• Manage tasks within new technology implementation projects.
• Create, update, and maintain scripts for automated reporting, product integrations, etc.
• Participate in the vulnerability management program to detect, triage, and ensure remediation or mitigation of system vulnerabilities.
• Collaborate with the internal IT and other departments to ensure security best practices for applications, services and processes and identify business or regulatory risks for management review.
• Recommend, design, implement, and manage security tools, controls, frameworks, and processes.

Skills

Security incident management

Vendor due diligence

Application security

Security policy compliance

Scripting (PowerShell, Python)

Education

Bachelor's degree in Computer science or Information security

Tools

antimalware

Vulnerability scanners

Centralized log correlators

Firewalls/Web proxies

MDM (Mobile Device Management)

Microsoft 365 solutions

GRC tools

Job description

Company Description Asset Inventories, Inc. is an industry leader in IT staffing and support services, delivering IT inventory personnel, IT project management, and cloud-based IT inventory software to organizations of all sizes. Founded in 1992 in Midtown Manhattan, the company maintains its headquarters in New York and operates satellite offices in Montreal, Buffalo, Chicago, Houston, Los Angeles, New England, San Diego, Toronto, and other key locations. Asset Inventories supports Fortune 100 companies, government agencies, and internationally recognized organizations, particularly in high-pressure environments such as trading floors. Core service areas include IT hardware and software support, IT asset management and tracking, proprietary cloud-based inventory software, custom data and web development, and software quality assurance resources. Team members join a collaborative environment focused on reliability, technical excellence, and long-term client partnerships.

Role Description The Information Security Analyst role is a Full-time on-site position based in London,UK. Information Security Team is responsible for ensuring compliance with global financial regulators, regional laws, and reducing the risk of cybersecurity incidents and data privacy breaches for the Firm’s global infrastructure, operations, systems, and data. This is achieved by applying cybersecurity best practices with policies and standards, application reviews, project planning, monitoring, incident response, training, and implementation of security tools. The team focuses on foundational security principles while developing new processes, tools, and testis to address emerging threats. A successful candidate will be excited about cybersecurity, understand current cybersecurity and technology trends (including generative AI technologies), and will be curious, thorough, and diligent in pursuing their goals.

Key Responsibilities:

• Monitor security tools, logs, and user reports for potential security issues and run local or global security incident management as needed
• Assist in the vendor cybersecurity due diligence program for onboarding new vendors and recertifying existing vendors on a regular basis
• Evaluate new and existing applications and cloud products for security concerns and recommend mitigations
• Create and update standard operating procedures, training content, technical documentation, and security guidelines and standards, and ensure that the Firm’s employees, technology, and services are compliant with its standards
• Manage tasks within new technology implementation projects
• Create, update, and maintain scripts for automated reporting, product integrations, etc
• Participate in the vulnerability management program to detect, triage, and ensure remediation or mitigation of system vulnerabilities
• Collaborate with the internal IT and other departments to ensure security best practices for applications, services and processes and identify business or regulatory risks for management review.
• Recommend, design, implement, and manage security tools, controls, frameworks, and processes

Qualifications:

• Bachelor's degree in Computer science, Information security or an equivalent degree or experience.
• 2+ years of working in a Information security or information technology role.
• Hand-on experience with enterprise security tools such a antimalware,vulnerability scanners, centralized log correlators, firewalls/web proxies, mobile device management, Microsoft 265 solutions, and governance risk and compliance solutions.
• Strong understanding of security best practices across diverse technologies and conducting independent research to fill in gaps in knowledge.
• Familiarity with scripting languages such as Powershell, Python, etc. strongly preferred.
• Familiarity with security frameworks or cybersecurity regulations preffered.
• Information security certifications (ICS2,SANS GIAC,vendor certifications) preferred.