Information Security Analyst (NIST)

Allianz; Guildford; Hybrid; GBP 45,000; Full time

Job summary

A prominent insurance company in Guildford is seeking an Information Security Analyst to advance its Information Security initiatives. This role involves executing Governance, Risk, and Compliance activities while implementing the NIST Cyber Security Framework organization-wide. Ideal candidates will have experience in information security, with a strong understanding of risk analysis and communication skills. The company offers a variety of flexible benefits, hybrid working options, and promotional opportunities within the global Allianz Group.

Benefits

Flexible buy/sell holiday options

Hybrid working

Annual performance-related bonus

Contributory pension scheme

Development days

Insurance product discounts

Retail discounts

Volunteering days

Qualifications

• Experience in information security with a solid understanding of Information Security control and governance frameworks.
• Experience developing information security controls catalogue in financial services sector.
• Experience of security transformation and delivery of security projects.

Responsibilities

• Support GRC initiatives and implement the NIST Cyber Security Framework.
• Conduct assessments to identify material gaps and monitor risks.
• Collaborate with teams for integrating security measures.

Skills

Information Security understanding

Risk analysis

Communication skills

Documentation creation

Education

Relevant certifications (CISSP, CCSP, CRISC, CISM)

Job description

Overview

Role Description

The Information Security Analyst plays a key role in supporting Allianz UK's Information Security initiatives, with a focus on executing the Governance, Risk, and Compliance (GRC) activities and implementing the NIST Cyber Security Framework (CSF) across the organisation. The NIST analyst will be involved in day-to-day GRC operations, such as designing and implementing security controls, interpreting requirements from the Group Information Security Framework, managing non-compliance issues and information security risks. This role contributes to advancing the company\'s Information Security initiatives by executing GRC activities and implementing the NIST CSF organization-wide, involving daily GRC operations, including designing and implementing security controls, interpreting requirements from the Group Information Security Framework, and managing non-compliance issues and information security risks.

Salary Information

Pay: Circa £45,000 per year. Pay is based on relevant experience, skills for the role, and location. Salary is only one part of our total reward package.

About you

• Conducting assessments to identify material gaps, analysing potential risks, and monitoring progress on maturity uplifting across security functions.
• You will be developing and implementing an information security controls catalogue, policies, and procedures aligned with the NIST Cyber Security Framework (CSF).
• Collaborating with the wider organization to integrate control testing and risk management activities into the existing governance framework.
• Assisting cross-functional teams and business units in integrating security measures into business operations.
• Supporting compliance activities with the Group Information Security Framework, Cyber Essentials, and PCI DSS attestation.
• Facilitating regular reviews and updates of control and risk management processes to remain effective and responsive to emerging threats and changes in the organizational landscape.

Essential Skills

• Experience in information security, with solid understanding of Information Security control and governance frameworks.
• Experience of developing information security controls catalogue in the financial services sector is highly desirable.
• Experience of security transformation and delivery of security projects, particularly within a federated organisation.

Desirable Skills

• Knowledge of Information Security and compliance frameworks, including NIST CSF, ISO 27001, Cyber Essentials, PCI DSS, and DORA, and the ability to design controls that align with these standards.
• Good awareness of risk methodologies and ability to analyse data for report generation.
• Skills in creating and maintaining comprehensive documentation, including control matrices, design process flows, and standard operating procedures.
• Strong communication and interpersonal skills, with the ability to convey complex security concepts to non-technical stakeholders.
• Relevant certifications such as CISSP, CCSP, CRISC, CISM, or ISO 27001 Lead Implementer are highly desirable

What We Will Offer You

Recognised and rewarded for a job well done, we have a range of flexible benefits for you to choose from- so you can pick a package that\'s perfect for you. We also offer flexible working options, global career opportunities across the wider Allianz Group, and fantastic career development and training. That\'s on top of enjoying all the benefits you\'d expect from the world\'s number one insurance brand, including:

• Flexible buy/sell holiday options
• Hybrid working
• Annual performance related bonus
• Contributory pension scheme
• Development days
• A discount up to 50% on a range of insurance products including car, home and pet
• Retail discounts
• Volunteering days

Our Ways of Working

Do you need flexibility with the hours you work? Let us know as part of your application and if it\'s right for our customers, our business and for you, then we\'ll do everything we can to make it happen. Here at Allianz, we are signatories of the ABIs flexible working charter. We believe in supporting hybrid work patterns, which balance the needs of our customers, with your personal circumstances and our business requirements. Our aim with this is to help innovation, creativity, and you to thrive - Your work life balance is important to us.

Integrity, Fairness, Inclusion & Trust

At Allianz, we believe in fostering an inclusive workforce and are proud to be an equal opportunity employer. Our commitment to equal opportunities, gender equity, and balanced gender representation, is demonstrated by our numerous accreditations: EDGE certified for gender inclusion, Women in Finance Charter members, Disability Confident employer, Stonewall Diversity Champion, Business in the Community\'s Race at Work Charter signatories, and Armed Forces Covenant gold standard employer. We embrace neurodiversity and welcome applications from neurodivergent and disabled candidates, offering tailored adjustments to ensure your success. We encourage our employees to advocate for their needs, whether it\'s assistive technology, ergonomic equipment, mentoring, coaching, or flexible work arrangements.

Accessible Application for All

As part of the Disability Confident Scheme, we support candidates with disabilities or long-term health conditions through the Offer an Interview Scheme, for those meeting the essential skills for the role.

Contact our Resourcing team to opt into this scheme or for assistance with your application, including larger text, hard copies, or spoken applications.

[e-mail]

For any inquiries or to submit your application, please contact: Scott Burns.

If you are an at-risk candidate facing potential redeployment, please include this information in your CV.

We reserve the right to close the ad early if we reach enough applications.

Closing date - 02/02/2025

89908 | IT & Tech Engineering | Professional | Non-Executive | Allianz UK | Full-Time | Permanent

.