Information Security Analyst Hybrid / Hatfield

Michael Page Technology; Hatfield; On-site; GBP 40,000 - 60,000; Full time

Job summary

A mid-sized life science organization in Hatfield is seeking an Information Security Analyst to implement ISO27001 standards and enhance security awareness. Candidates should have practical experience in risk management and be familiar with security tools. The role offers 24 days of holiday, a performance bonus of up to 10%, and contributions to a pension scheme.

Benefits

24 days of holiday leave

Performance-based bonus of up to 10%

Pension scheme with contributions up to 10%

Private medical insurance

Dental cover

Finance support for professional certifications

Qualifications

• Practical experience and understanding of ISO27001 is essential.
• Familiarity with NIST and GDPR is preferred.
• Solid experience in managing threat, risk, and vulnerabilities is needed.

Responsibilities

• Implement and maintain ISMS aligning with ISO27001.
• Ensure security controls based on ISO27001 and NIST are in place.
• Lead phishing campaigns and conduct vulnerability assessments.

Skills

ISO27001 knowledge

NIST familiarity

Threat and risk management

Analytical skills

Problem-solving skills

Experience with security tools

Education

Security related professional certification

Tools

SIEM

Intrusion detection systems

Endpoint protection tools

Job description

The Information Security Analyst will play a critical role in safeguarding the organisation's systems and data, ensuring compliance with security policies and regulations. Based in Hatfield, this role is ideal for individuals passionate about the life science industry and technology.

Client Details

The hiring company is a medium–sized organisation operating within the life science industry, with a focus on innovation and excellence in its field. The company is known for its commitment to leveraging technology to drive forward its mission.

Description

• Implement and maintain ISMS aligning with ISO27001
• Ensure security controls are in–place based on ISO27001 and NIST
• As the regional security representative in the global Security / Technology project
• Lead / execute phishing campaign
• Conduct vulnerability assessments and implement measures to mitigate potential risks.
• Involve in global security operations process, analysis and escalation of security alerts / tickets from global SOC team
• Maintain and update security policies, standards, and procedures in alignment with industry regulations.
• Collaborate with cross–functional teams to ensure secure system designs and implementations.
• Provide training and support to staff to enhance security awareness across the organisation.

Profile

• Practical experience and understanding of ISO27001
• Familiar with NIST and GDPR is preferred
• Solid experience in threat, risk and vulnerabilities management process
• Experience with security tools such as SIEM, intrusion detection systems, and endpoint protection.
• Strong analytical and problem–solving skills.
• Hold at least one security related professional certification is desirable

Job Offer

• 24 days of holiday leave
• Performance–based bonus of up to 10%.
• Pension scheme with contributions up to 10%.
• Private medical insurance, life assurance, dental cover
• Finance support on professional certifications / memberships