Information Security Analyst

J C Bamford Excavators Ltd; Rochester; On-site; GBP 50,000 - 75,000; Full time

Job summary

A leading excavator manufacturer in Rochester is seeking an Information Security Lead to ensure the protection of systems and data from cyber threats. You will monitor security systems, respond to incidents, and promote a culture of security awareness across the organization. The ideal candidate has strong project management skills and a solid understanding of security practices. This role offers a competitive salary and employee benefits including a pension scheme and 33 days of holiday.

Benefits

Competitive salary

33 days of holiday

Onsite gym

In-house doctor, dentist, and optician

ULEV car scheme

Cycle to Work Scheme

JCB Rewards Hub discounts

Qualifications

• Solid understanding of security principles.
• Ability to perform security audits.
• Strong skills in managing multiple projects.

Responsibilities

• Run and monitor Information Security systems.
• Respond to security incidents promptly.
• Conduct regular security risk reviews.

Skills

Adaptability

Project Management

Incident Response Management

Communication of risks

Tools

E-mail Security

EDR

NAC

365

Job description

Click here for our Careers & Life at JCB pages

About the role:

The Information Security team is responsible for ensuring that JCB has the correct level of security integrity to protect our systems, information, personal data and people from cyber-attacks and unauthorised access.

You will work with the Information Security Team, IT colleagues, internal stakeholders and third parties to ensure that all JCB information and systems are secure, fit for purpose and protected to an optimal level.

You will play a crucial role as a security lead. You will be the sign-off for security assessments and new projects as well as business as usual in this varied role. This role gives the opportunity for exposure on a global scale.

You will be responsible for driving the security scrutiny, culture, awareness and adoption across the JCB organisation.

What does this roleinvolve day to day?

• Day-to-day running and monitoring of Information Security systems - analyse and interpret outputs to identify security weaknesses and recommend continuous improvements.
• Be a key participant in or leader of large IT and business projects.
• Respond to Security Incidents, reports and alerts ensuring prompt containment and recovery.
• Plan and oversee regular security penetration testing against new and existing services to identify weaknesses and formulate plans and processes to minimise current and future risk.
• Conduct regular security risk reviews and manage security remediation activity, internally on new IT/Business projects and with third parties.
• Be the technical sign-off for all BAU Change Requests.
• Promote culture of ‘secure by design’ and facilitate appropriate activities to support and improve Information Security Awareness.
• Articulate risk in technical and non-technical terminology so that it can be interpreted by Group IT and business stakeholders.
• Seek out and exploit opportunities for improvement to the group’s overall security posture.
• Passionate about cyber security and keeping up with the latest trends, threats and mitigations.

This will be suited to you if

• You're adaptable – whilst this role requires some use of Security Toolsets and a Technical Mindset, you’re not expected or required to be an expert in all areas but expected to have a solid understanding and grounding in security principals to adapt to the varied requirements.
• You have the ability to manage and use a wide variety of security software, systems, services and toolsets such as E-mail Security, EDR, NAC, IT/OT Segmentation, 365 etc along with an understanding of malware prevention, emerging threats, attacks and vulnerability management.
• You possess understanding of Information Security best practice for elements including workstations, servers, cloud, networking, architecture, common protocols and application security.
• You have the ability to confidently perform security audits, both internal and external (e.g., third party and supplier assurance) and ensure recommendations are followed for continuous improvement.
• You have strong Project Management skills - able to independently manage multiple projects, manage own workload, prioritise and meet tight deadlines.
• You have strong Incident Response Management skills including threat and vulnerability analysis.
• You have the ability to communicate business and technical risk to all levels of audience.
• You possess understanding of IT Service Management principles ideally ITIL.

What happens next?

Ordinarily, our Resourcing Team reviews and shortlists CVs. If shortlisted, you’ll speak to one of our Recruiters to discuss the role further. Our interview process usually consists of an initial teams interview followed by an in-person interview. We’ll keep in touch throughout the process but if you have any questions, please get in touch at [e-mail]

What’s in it for you?

This is your chance to join a company that values expertise not only in rewards but also in real employee care. At JCB you don’t just get a competitive salary, 33 days’ holiday and access to our company pension—you can also use our onsite gym, in-house doctor, dentist and visiting optician. We have an ULEV car scheme available for our employees too. Then there’s the JCB Rewards Hub, which gives you discounts with high street retailers. Feel like biking to work? There’s our Cycle to Work Scheme.

We value diversity and welcome applications from candidates from all backgrounds.

We’re committed to ensuring our recruitment process is fair and inclusive. If you face any accessibility challenges with your online application and require additional support, you have the option of speaking to a member of our Recruitment Team who can support you to complete an application in an alternative format. If you would benefit from this support, please email [e-mail], and a member of the team will be in touch.

Recruitment Agencies: JCB does not accept any speculative approaches to present candidates for advertised vacancies.