Information Security Analyst

J C Bamford Excavators Ltd; Rocester; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading company in construction equipment in the United Kingdom seeks an Information Security Lead to ensure the integrity of their systems and information. The ideal candidate will manage security assessments, respond to incidents, and promote a culture of security awareness across the organization. Strong project and incident management skills are essential, along with the ability to communicate effectively with technical and non-technical stakeholders. Competitive salary and benefits are offered in a supportive working environment.

Benefits

Competitive salary

33 days holiday

Onsite gym

Access to in-house doctor and dentist

ULEV car scheme

Cycle to Work Scheme

Qualifications

• Ability to manage wide variety of security software and systems.
• Strong understanding of malware prevention and vulnerability management.
• Confidence in performing internal and external security audits.

Responsibilities

• Monitor Information Security systems and identify weaknesses.
• Manage responses to security incidents and alerts.
• Conduct security risk reviews and manage remediation activities.
• Promote 'secure by design' culture within the organization.

Skills

Understanding of Information Security best practices

Project Management skills

Incident Response Management skills

Communication of business and technical risk

Adaptability to security toolsets

Tools

Security Toolsets

E-mail Security

EDR

ITIL

Job description

Click here for our Careers & Life at JCB pages

About the role

The Information Security team is responsible for ensuring that JCB has the correct level of security integrity to protect our systems, information, personal data and people from cyber-attacks and unauthorised access.

You will work with the Information Security Team, IT colleagues, internal stakeholders and third parties to ensure that all JCB information and systems are secure, fit for purpose and protected to an optimal level.

You will play a crucial role as a security lead. You will be the sign-off for security assessments and new projects as well as business as usual in this varied role. This role gives the opportunity for exposure on a global scale.

You will be responsible for driving the security scrutiny, culture, awareness and adoption across the JCB organisation.

What does this role involve day to day?

• Day-to-day running and monitoring of Information Security systems - analyse and interpret outputs to identify security weaknesses and recommend continuous improvements.
• Be a key participant in or leader of large IT and business projects.
• Respond to Security Incidents, reports and alerts ensuring prompt containment and recovery.
• Plan and oversee regular security penetration testing against new and existing services to identify weaknesses and formulate plans and processes to minimise current and future risk.
• Conduct regular security risk reviews and manage security remediation activity, internally on new IT/Business projects and with third parties.
• Be the technical sign-off for all BAU Change Requests.
• Promote culture of ‘secure by design’ and facilitate appropriate activities to support and improve Information Security Awareness.
• Articulate risk in technical and non-technical terminology so that it can be interpreted by Group IT and business stakeholders.
• Seek out and exploit opportunities for improvement to the group’s overall security posture.
• Passionate about cyber security and keeping up with the latest trends, threats and mitigations.

This will be suited to you if…

• You're adaptable – whilst this role requires some use of Security Toolsets and a Technical Mindset, you’re not expected or required to be an expert in all areas but expected to have a solid understanding and grounding in security principals to adapt to the varied requirements.
• You have the ability to manage and use a wide variety of security software, systems, services and toolsets such as E-mail Security, EDR, NAC, IT/OT Segmentation, 365 etc along with an understanding of malware prevention, emerging threats, attacks and vulnerability management.
• You possess understanding of Information Security best practice for elements including workstations, servers, cloud, networking, architecture, common protocols and application security.
• You have the ability to confidently perform security audits, both internal and external (e.g., third party and supplier assurance) and ensure recommendations are followed for continuous improvement.
• You have strong Project Management skills - able to independently manage multiple projects, manage own workload, prioritise and meet tight deadlines.
• You have strong Incident Response Management skills including threat and vulnerability analysis.
• You have the ability to communicate business and technical risk to all levels of audience.
• You possess understanding of IT Service Management principles ideally ITIL.

What happens next?

Ordinarily, our Resourcing Team reviews and shortlists CVs. If shortlisted, you’ll speak to one of our Recruiters to discuss the role further. Our interview process usually consists of an initial team’s interview followed by an in-person interview. We’ll keep in touch throughout the process but if you have any questions, please get in touch at [e-mail]

What’s in it for you?

This is your chance to join a company that values expertise not only in rewards but also in real employee care. At JCB you don’t just get a competitive salary, 33 days’ holiday and access to our company pension—you can also use our onsite gym, in-house doctor and dentist. We have an ULEV car scheme available for our employees too. Then there’s the JCB Rewards Hub, which gives you discounts with high street retailers. Feel like biking to work? There’s our Cycle to Work Scheme.

We value diversity and welcome applications from candidates from all backgrounds.

We’re committed to ensuring our recruitment process is fair and inclusive. If you face any accessibility challenges with your online application and require additional support, you have the option of speaking to a member of our Resourcing Team who can support you to complete an application in an alternative format. If you would benefit from this support, please email [e-mail], and a member of the team will be in touch.

Recruitment Agencies: JCB does not accept any speculative approaches to present candidates for advertised vacancies.