Information Security Analyst

Allianz; Guildford; Hybrid; GBP 45,000 - 52,000; Full time

Job summary

Allianz UK is seeking an Information Security Analyst to enhance their GRC activities and implement the NIST Cyber Security Framework. The ideal candidate will manage risks, design security controls, and ensure compliance with regulations. Applicants should have relevant experience in information security and strong communication skills.

Benefits

Flexible buy/sell holiday options

Hybrid working

Annual performance related bonus

Contributory pension scheme

Retail discounts

Volunteering days

Qualifications

• Minimum of 2 years of experience in information security.
• Solid understanding of Information Security control and governance frameworks.
• Experience in security transformation projects is highly desirable.

Responsibilities

• Support GRC activities and implement NIST Cyber Security Framework.
• Design and implement security controls, manage non-compliance issues.
• Conduct assessments to identify gaps and analyze risks.

Skills

Risk analysis

Information Security

Control design

Communication

Education

Relevant certifications (CISSP, CCSP, etc.)

Job description

Role Description

The Information Security Analyst plays a key role in supporting Allianz UK's Information Security initiatives, with a focus on executing the Governance, Risk, and Compliance (GRC) activities and implementing the NIST Cyber Security Framework (CSF) across the organisation.

The NIST analyst will involve in day-to-day GRC operations, such as designing and implementing security controls, interpreting requirements from the Group Information Security Framework, managing non-compliance issues and information security risks.

As an Information Security Analyst at Allianz UK, you will be pivotal in advancing the company's Information Security initiatives by executing Governance, Risk, and Compliance (GRC) activities and implementing the NIST Cyber Security Framework (CSF) organization-wide. Your role will involve daily GRC operations, including designing and implementing security controls, interpreting requirements from the Group Information Security Framework, and managing non-compliance issues and information security risks.

Salary Information

Pay: Circa £45,000 per year.

Pay is based on relevant experience, skills for the role, and location. Salary is only one part of our total reward package.

About you

• Conducting assessments to identify material gaps, analysing potential risks, and monitoring progress on maturity uplifting across security functions.
• You will be developing and implementing an information security controls catalogue, policies, and procedures aligned with the NIST Cyber Security Framework (CSF).
• Collaborating with the wider organization to integrate control testing and risk management activities into the existing governance framework.
• Assisting cross-functional teams and business units in integrating security measures into business operations.
• Supporting compliance activities with the Group Information Security Framework, Cyber Essentials, and PCI DSS attestation.
• Facilitating regular reviews and updates of control and risk management processes to remain effective and responsive to emerging threats and changes in the organizational landscape.

Essential Skills

• Minimum of 2 years of experience in information security, with solid understanding of Information Security control and governance frameworks.
• Experience of developing information security controls catalogue in the financial services sector is highly desirable.
• Experience of security transformation and delivery of security projects, particularly within a federated organisation.

Desirable Skills

• Knowledge of Information Security and compliance frameworks, including NIST CSF, ISO 27001, Cyber Essentials, PCI DSS, and DORA, and the ability to design controls that align with these standards.
• Good awareness of risk methodologies and ability to analyse data for report generation.
• Skills in creating and maintaining comprehensive documentation, including control matrices, design process flows, and standard operating procedures.
• Strong communication and interpersonal skills, with the ability to convey complex security concepts to non-technical stakeholders.
• Relevant certifications such as CISSP, CCSP, CRISC, CISM, or ISO 27001 Lead Implementer are highly desirable

What We Will Offer You

Recognised and rewarded for a job well done, we have a range of flexible benefits for you to choose from- so you can pick a package that's perfect for you. We also offer flexible working options, global career opportunities across the wider Allianz Group, and fantastic career development and training. That's on top of enjoying all the benefits you'd expect from the world's number one insurance brand, including:

• Flexible buy/sell holiday options

• Hybrid working

• Annual performance related bonus

• Contributory pension scheme

• Development days

• A discount up to 50% on a range of insurance products including car, home and pet

• Retail discounts

• Volunteering days

Our Ways of Working

Do you need flexibility with the hours you work? Let us know as part of your application and if it's right for our customers, our business and for you, then we'll do everything we can to make it happen. Here at Allianz, we are signatories of the ABIs flexible working charter. We believe in supporting hybrid work patterns, which balance the needs of our customers, with your personal circumstances and our business requirements. Our aim with this is to help innovation, creativity, and you to thrive - Your work life balance is important to us.

Diversity & Inclusion

At Allianz, we prioritize diversity and inclusion, demonstrated by our numerous accreditations: EDGE certified for gender inclusion, Women in Finance Charter members, Disability Confident employer, Stonewall Diversity Champion, Business in the Community's Race at Work Charter signatories, and Armed Forces Covenant gold standard employer.

We embrace neurodiversity and welcome applications from neurodivergent and disabled candidates, offering tailored adjustments to ensure your success.

We encourage our employees to advocate for their needs, whether it's assistive technology, ergonomic equipment, mentoring, coaching, or flexible work arrangements.

Accessible Application for All

As part of the Disability Confident Scheme, we support candidates with disabilities or long-term health conditions through the Offer an Interview Scheme, for those meeting the essential skills for the role.

Contact our Resourcing team to opt into this scheme or for assistance with your application, including larger text, hard copies, or spoken applications.

[e-mail]

For any inquiries or to submit your application, please contact: Scott Burns.

If you are an at-risk candidate facing potential redeployment, please include this information in your CV.

We reserve the right to close the ad early if we reach enough applications.

Closing date 04/7/2025

Join us - Let's Care for Tomorrow.

#LI-Hybrid