Information Security Analyst

E-Solutions; United Kingdom; On-site; GBP 55,000 - 75,000; Full time

Job summary

A leading company seeks an experienced Information Security professional to ensure compliance and secure systems management within their organization. Candidates should possess strong analytical skills and proven experience in risk assessments, governance frameworks, and excellent communication abilities, bridging technical requirements with business objectives.

Qualifications

• 5+ years of experience in Information Security.
• Experience with NIST CSF, ISO27001, FCA compliance.
• Strong interpersonal and communication skills.

Responsibilities

• Conduct cyber risk assessments and develop mitigation strategies.
• Manage cybersecurity compliance with regulatory frameworks.
• Develop and maintain cyber risk reporting frameworks.

Skills

Information Security

Cyber Risk Assessments

Compliance Management

Communication Skills

Analytical Skills

Problem Solving

Organizational Skills

Tools

Microsoft Systems

Azure Cloud

Job description

Essential Skills, Knowledge & Experience

• A minimum of five years of experience in an Information Security role.
• Experience working in a professional services environment
• Hands-on experience conducting cyber risk assessments and developing cyber risk mitigation strategies.
• Hands-on experience conducting cyber security control assessments.
• Hands-on experience developing and maintain cyber risk reporting and risk appetite statements.
• Hands-on knowledge and experience working with recognised security frameworks such as, NIST CSF, ISO27001 etc.
• Hands-on experience managing and maintaining cybersecurity compliance with regulatory frameworks such as FCA, PRA, NYDFS etc.
• Experience developing a governance framework by maintaining policy and procedure.
• Ability to achieve against agreed deadlines.
• Ability to work both independently and collaboratively.
• Strong interpersonal and communication skills (written and verbal), with the ability to interact with technical and non-technical stakeholders at all levels.
• Strong analytical and problem-solving skills.
• Strong organisation and planning skills.
• A pro-active and enthusiastic approach.
• Knowledge of Microsoft systems (on-premise and Azure cloud), technologies, infrastructure, awareness of systems management and operational support tools.
• Acknowledges and responds positively to exceptional events in information security to meet the objectives of the business.