Information Security Analyst

JCB; Rochester; On-site; GBP 40,000 - 70,000; Full time

Job summary

An established industry player is seeking an Information Security Analyst to enhance its security integrity and protect vital information. This role involves collaborating with IT teams and stakeholders to ensure systems are secure and resilient against cyber threats. You will lead security assessments, manage incident responses, and promote a culture of security awareness across the organization. With opportunities for global exposure, this position offers a competitive salary, generous holiday allowance, and access to various employee benefits, including an onsite gym and health services. Join a company that values expertise and employee care, and be part of a team dedicated to safeguarding information and systems.

Benefits

33 days holiday

Company pension

Onsite gym

In-house doctor

Dentist

Visiting optician

ULEV car scheme

JCB Rewards Hub discounts

Cycle to Work Scheme

Qualifications

• Solid understanding of security principles and adaptability to varied requirements.
• Ability to manage and use various security software and systems.

Responsibilities

• Monitor Information Security systems and recommend improvements.
• Lead security assessments and manage remediation activities.

Skills

Security Principles

Incident Response Management

Project Management

Security Audits

Communication Skills

Threat Analysis

Education

Bachelor's Degree in Information Security or related field

Tools

E-mail Security

EDR

NAC

ITIL

Job description

Salary: Competitive Salary

Contract Type: Full Time

Working Pattern: Permanent

The Opportunity - Information Security Analyst

The Information Security team is responsible for ensuring that JCB has the correct level of security integrity to protect our systems, information, personal data and people from cyber-attacks and unauthorized access.

You will work with the Information Security Team, IT colleagues, internal stakeholders and third parties to ensure that all JCB information and systems are secure, fit for purpose and protected to an optimal level.

You will play a crucial role as a security lead, being the sign-off for security assessments and new projects as well as business as usual in this varied role. This role gives the opportunity for exposure on a global scale.

You will be responsible for driving the security scrutiny, culture, awareness and adoption across the JCB organization.

What does this role involve day to day?

• Day-to-day running and monitoring of Information Security systems - analyze and interpret outputs to identify security weaknesses and recommend continuous improvements.
• Be a key participant in or leader of large IT and business projects.
• Respond to Security Incidents, reports and alerts ensuring prompt containment and recovery.
• Plan and oversee regular security penetration testing against new and existing services to identify weaknesses and formulate plans and processes to minimize current and future risk.
• Conduct regular security risk reviews and manage security remediation activity, internally on new IT/Business projects and with third parties.
• Be the technical sign-off for all BAU Change Requests.
• Promote culture of ‘secure by design’ and facilitate appropriate activities to support and improve Information Security Awareness.
• Articulate risk in technical and non-technical terminology so that it can be interpreted by Group IT and business stakeholders.
• Seek out and exploit opportunities for improvement to the group’s overall security posture.
• Be passionate about cyber security and keeping up with the latest trends, threats and mitigations.

This will be suited to you if

• You are adaptable – whilst this role requires some use of Security Toolsets and a Technical Mindset, you’re not expected or required to be an expert in all areas but expected to have a solid understanding and grounding in security principles to adapt to the varied requirements.
• You have the ability to manage and use a wide variety of security software, systems, services and toolsets such as E-mail Security, EDR, NAC, IT/OT Segmentation, 365 etc along with an understanding of malware prevention, emerging threats, attacks and vulnerability management.
• Understanding of Information Security best practice for elements including workstations, servers, cloud, networking, architecture, common protocols and application security.
• You have the ability to confidently perform security audits, both internal and external (e.g., third party and supplier assurance) and ensure recommendations are followed for continuous improvement.
• You have strong Project Management skills - able to independently manage multiple projects, manage own workload, prioritize and meet tight deadlines.
• Strong Incident Response Management skills including threat and vulnerability analysis.
• The ability to communicate business and technical risk to all levels of audience.
• Understanding of IT Service Management principles ideally ITIL.

What happens next?

Ordinarily, our Resourcing Team reviews and shortlists CVs. If shortlisted, you’ll speak to one of our Recruiters to discuss the role further. Our interview process usually consists of an initial teams interview followed by an in-person interview. We’ll keep in touch throughout the process but if you have any questions, please get in touch at [e-mail]

What’s in it for you?

This is your chance to join a company that values expertise not only in rewards but also in real employee care. At JCB you don’t just get a competitive salary, 33 days’ holiday and access to our company pension—you can also use our onsite gym, in-house doctor, dentist and visiting optician. We have an ULEV car scheme available for our employees too. Then there’s the JCB Rewards Hub, which gives you discounts with high street retailers. Feel like biking to work? There’s our Cycle to Work Scheme.

We value diversity and welcome applications from candidates from all backgrounds.

We’re committed to ensuring our recruitment process is fair and inclusive. If you face any accessibility challenges with your online application and require additional support, you have the option of speaking to a member of our Recruitment Team who can support you to complete an application in an alternative format. If you would benefit from this support, please email [e-mail], and a member of the team will be in touch.

Recruitment Agencies: JCB does not accept any speculative approaches to present candidates for advertised vacancies.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology

Industries

Machinery Manufacturing