Information Security Analyst — Hybrid, Risk & Compliance

WH Smith PLC; Greater London; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

A leading retail company in Greater London is seeking an Information Security Analyst to oversee information security policies, manage risk assessments, and ensure compliance with regulations. Responsibilities include maintaining security standards and documentation, along with facilitating corporate training programs. This role offers a hybrid working model, competitive salary, bonuses, and additional benefits like private medical insurance and enhanced leave policies.

Benefits

Hybrid working model

4 pm Friday finish

Flexible working

25 days holiday plus additional

Family friendly leave

Competitive pension contribution

Share save scheme

Annual bonus

Competitive salary with car allowance

Private medical insurance

Staff discount card

Qualifications

• Experience in a combination of risk management, information security and IT roles.
• Knowledge of common information security management frameworks.
• Strong knowledge of Office 365, Teams, and SharePoint.
• Knowledge of data protection regulations.

Responsibilities

• Maintain information security policies and standards.
• Manage the information & data security roadmap.
• Facilitate risk assessment and management.
• Deliver information and data security training.
• Maintain security risk management technical solutions.
• Conduct access control and asset inventory reviews.
• Partner with technology groups as a data security representative.
• Document evidence for annual PCI DSS and DPIA.

Skills

Risk management

Information security

IT roles

Audit

Knowledge of ISO27001

Knowledge of Cyber Essentials

Knowledge of NIST

Knowledge of PCI DSS

Knowledge of SOC2

Office 365

Teams

SharePoint

Data protection regulations

Job description

A leading retail company in Greater London is seeking an Information Security Analyst to oversee information security policies, manage risk assessments, and ensure compliance with regulations. Responsibilities include maintaining security standards and documentation, along with facilitating corporate training programs. This role offers a hybrid working model, competitive salary, bonuses, and additional benefits like private medical insurance and enhanced leave policies.