Information Security Analyst 1069

Interface Recruitment UK; Leeds; On-site; GBP 35,000 - 50,000; Full time

Job summary

A leading recruitment agency is seeking an Information Security Analyst for their IT team in Leeds. This pivotal role involves developing and maintaining security policies, managing incidents, and enhancing security measures across the organization. The ideal candidate will possess expertise in compliance standards and demonstrate strong analytical skills to effectively communicate security information to all stakeholders.

Qualifications

• Hands-on experience in information security required.
• Familiarity with Cyber Essentials, ISO 27001/27002, Data Protection Act vital.
• Strong understanding of IT infrastructure and security testing principles.

Responsibilities

• Manage information security incident response activities.
• Perform security checks, audits, and manage risks.
• Create and maintain security policies and procedures.

Skills

Incident Management

Risk Reporting

Vulnerability Scanning

Interpersonal Communication

Analysis

Education

Hands-on experience in information security

Knowledge of security standards (Cyber Essentials, ISO 27001)

Understanding of IT infrastructure

Job description

We are looking to recruit an Information Security Analyst to join our existing IT team. Working with the Head of Information Services, you will provide advice and guidance on information security and develop security policies and processes across the entire infrastructure estate.

This role is responsible for supporting and maintaining information-driven solutions within a fast-paced environment. As a member of the IT team, you will review all aspects of the information systems environment and its components. The successful candidate will proactively improve security measures and offer guidance on information security matters.

You should be comfortable with autonomy, as this role is the sole information security employee within the group. You will work closely with the IT team and enjoy responsibilities that suit those with a strong understanding of IT infrastructure and information security in dynamic environments.

Key Duties and Responsibilities

• Assist with information security incident management and response activities
• Support daily security operations, including managing security alerts from systems and end users
• Perform regular security checks, reconciliation, compliance audits, and investigate exceptions
• Complete information security questionnaires and support related processes
• Identify and report security risks to management and the board
• Create and maintain security policies, processes, and procedures
• Develop technical controls to enhance security capabilities against cyber threats
• Monitor and implement systems for security reporting and incident detection
• Document user requirements and create technical training guides
• Manage risk registration processes
• Test disaster recovery plans and improve security resilience

Qualifications and Technical Requirements

• Hands-on experience in information security
• Knowledge of security standards such as Cyber Essentials, ISO 27001/27002, Data Protection Act, and GDPR
• Understanding of IT infrastructure and security testing principles, including vulnerability scanning and risk reporting
• Experience in creating documentation

Knowledge Areas

• Information Security and Threat Analysis
• Incident Management and Response
• Disaster Recovery and Business Continuity
• Event and Log Analysis

Core Behavioral Skills

• Confident interpersonal communication skills, able to simplify technical information for users
• Team player with analytical mindset
• Comfortable working in fast-paced, dynamic environments
• Customer-focused with support experience for demanding users
• Strong organizational and workload management skills
• Ability to report on progress and activities