Information Security Analyst - Product Assurance

Sainsbury's; Coventry; Hybrid; GBP 45,000 - 60,000; Full time

Job summary

A leading company in the retail sector seeks an Information Security Analyst to join their Data Governance and Information Security Team. You will ensure secure product delivery, manage security risks, and maintain effective communication with stakeholders, contributing to the safety of their engineering and development practices.

Benefits

Colleague discounts across brands

Holiday allowance and bonus scheme

Pension and life cover

Wellness benefits

Flexible working

Qualifications

• Minimum 4 years of proven security experience.
• Knowledge of Docker, Kubernetes; understanding of API gateways.
• Experience with Risk & Vulnerability Management frameworks.

Responsibilities

• Ensure security is integrated by design in products.
• Communicate risks to technical and non-technical audiences.
• Coordinate with Security Testing Team for ethical hacking.

Skills

Stakeholder management

Risk assessment

Analytical skills

Communication

Education

CompTIA Security+

AWS Security

CISSP

CISA

MSc in Cyber Security

Tools

GitHub

Jenkins

Jira

Cloud technologies

Job description

Job Title / Role

Information Security Analyst – Product Assurance

Reporting to

Information Security Manager – Sainsbury’s

Division/Dept

Data Governance and Information Security (Corporate Services)

Location

Holborn, Coventry, Manchester (Flexible)

In a nutshell

As an Information Security Analyst in the Data Governance and Information Security Team, you will work within the Product Assurance team, responsible for ensuring that Engineering and Development communities build and maintain secure products throughout their lifecycle.

You will review our security posture regularly and set directions for improvements aligned with evolving threats and business goals.

What you need to do

With solid all-round Infosec experience and stakeholder management skills, you will ensure robust security across our environment.

• Work flexibly within Engineering Teams, maintaining governance and challenge where needed
• Ensure security is integrated by design, with secure product delivery and data protection
• Define and verify Security Non-Functional Requirements for projects
• Coordinate with the Security Testing Team for ethical hacking, code reviews, and scans
• Provide assurance for IT products throughout their lifecycle
• Communicate risks effectively to technical and non-technical audiences
• Identify, assess, and manage risks related to Cloud and Data, monitoring according to risk appetite
• Build relationships with senior stakeholders to understand and manage security risks
• Explain technical issues clearly to business and engineering teams
• Collaborate with third-party partners supporting Sainsbury’s

What you need to know and show

• Minimum 4 years of proven security experience ensuring secure system design and security posture improvement
• Knowledge of containerization (Docker, Kubernetes)
• Understanding of logging, monitoring, load balancing, API gateways
• Experience with GitHub, Jenkins, Jira
• Basic knowledge of OWASP Top 10, Mitre ATT&CK, NIST, PCI-DSS, Cyber Kill Chain
• Understanding of PAM, EDR, AV, IPS, SIEM, WAF, DLP technologies
• Ability to verify solutions through controls and testing
• Awareness of the changing threat landscape
• Ability to challenge concerns and escalate appropriately
• Self-motivated and independent work ethic
• Deep understanding of data and security risks in large enterprises
• Experience with Risk & Vulnerability Management frameworks
• Strong analytical and reporting skills
• Experience with serverless cloud tech like AWS Lambda and storage

Desirable Qualifications

Preferred certifications and qualifications include: CompTIA Security+, AWS Security, CISSP, CISA, MSc in Cyber Security, among others.

Benefits

• Colleague discounts across brands
• Holiday allowance and bonus scheme
• Pension and life cover
• Wellness benefits, flexible working, and development opportunities

We promote work-life balance with flexible, remote, and collaborative working options.