Information Security Assurance Analyst

Tria; England; On-site; GBP 46,000 - 55,000; Full time

Job summary

A leading utility company in the United Kingdom is seeking an experienced Information Security Assurance Analyst. This critical role involves ensuring the effectiveness of IT security controls and identifying gaps in design documents. You will collaborate with the leadership team and need at least 2 years of cyber security experience, excellent communication skills, and a good understanding of Cyber Security Frameworks like NIST and ISO 27001. Join us in modernising the network and driving innovation.

Benefits

Salary sacrifice pension scheme

25 days holiday + Bank Holidays

Opportunity to work with OT technologies

Qualifications

• Strong experience in performing threat modelling exercises.
• Experience in reviewing architecture documents for compliance with security policies.
• Knowledge of technology risk and cyber security frameworks like NCSC CAF and ISO 27001.

Responsibilities

• Provide assurance regarding the effectiveness of IT security controls.
• Identify security control gaps in design documents.
• Recommend amendments and mitigation strategies.

Skills

Performing threat modelling exercises

Reviewing architecture definition documents

Knowledge of technology risk and controls

Understanding Cyber Security Frameworks

2+ years cyber security experience

Excellent communication skills

Job description

Information Security Assurance Analyst

Up to £55,000 per annum

2x per month on site - Portsmouth

We have a brilliant opportunity to join an industry-leading utility company based in the Southeast. They are going through a period of growth, undergoing multiple digital and tech transformations. As a UK Critical National Infrastructure provider, Information Security is an integral part of their business operation, so this role is critical to the business.

We are looking for an Information Security Assurance Analyst who will 'fly the flag' for Information Security, providing assurance to the leadership team regarding the design and operating effectiveness of IT security controls within future IT projects and implementation. You will be responsible for reviewing and identifying security control gaps in design documents, providing recommendations for amendments and mitigation.

Qualifications

• Strong experience of performing threat modelling exercises
• Experience of reviewing high/low level architecture definition documents for compliance against security policies and standards
• Knowledge of technology risk and controls including relevant tools and techniques
• Good understanding and practical experience of Cyber Security Frameworks including NCSC CAF, NIST and ISO 27001
• Must have at least 2 years' cyber security experience
• Excellent communication skills with the ability to deal with conflicting priorities

Benefits

• The opportunity to work in a highly skilled team, with exposure to OT technologies
• Salary sacrifice pension scheme
• 25 days holiday + Bank Holidays
• You will need to be eligible for SC Clearance/have an active SC Clearance to be considered for this role

There couldn't be a more exciting time to join this organisation while they take huge steps to decarbonise their network and modernise and innovate like never before. If this sounds of interest, please apply today.