Information Security Consultant

Leap29; Leeds; On-site; GBP 40,000 - 55,000; Full time

Job summary

A leading security firm in Leeds is seeking a security analyst to assist with incident management and develop security policies. The ideal candidate will have over two years of experience in security or infrastructure environments and knowledge of standards like Cyber Essentials and ISO 27001. This role involves security checks, documentation, and proactive risk management. Competitive compensation is offered.

Qualifications

• At least two years of hands-on experience in security and/or infrastructure within an enterprise environment.
• Exposure to enterprise information security standards including Cyber Essentials, ISO 27001, 27002, etc.
• Experience in formal document creation, such as reports or procedures.

Responsibilities

• Assist with security incident management and response activities.
• Perform daily, weekly, and monthly security checks and compliance checks.
• Develop and enhance security policies and procedures.

Skills

Hands-on experience in security and/or infrastructure

Understanding of security testing principles

Experience with Microsoft O365 Security solutions

Knowledge of disaster recovery principles

Ability to create formal documents

Tools

Cyber Essentials

ISO 27001

GDPR

Vulnerability Management

Job description

Social network you want to login/join with:

Assist with security incident management and response activities.

Provide general support in managing and responding to security alerts from systems and end users.

Perform daily, weekly, and monthly security checks, reconciliation, compliance checks, and investigate exceptions.

Complete client security requirement questionnaires and support the bidding process.

Identify and raise awareness of security risks.

Develop and enhance security policies, processes, procedures, and technical controls to strengthen security capabilities and resilience to cyber threats.

Take a proactive role in identifying security risks, mitigations, and opportunities to strengthen resilience to cyber-attacks and security incidents.

Participate in the design and implementation of systems and applications.

Develop user and technical training guides.

Maintain and manage the IT Risk register.

Test Disaster Recovery (DR) plans and capabilities to ensure they work as designed, identify gaps, lessons learned, and work with the business to drive continual development and enhancement.

Technical Requirements:

At least two years of hands-on experience in security and/or infrastructure within an enterprise environment.

Exposure to enterprise information security standards including Cyber Essentials, ISO 27001, 27002, etc., Data Protection Act, and GDPR.

Experience with Microsoft O365 Security solutions, Networking, Security operations, Vulnerability Management, and Security Auditing.

Good understanding of security testing principles, including vulnerability scanning, risk identification, resolution, and reporting.

Experience in formal document creation, such as reports or procedures.

Detailed knowledge of:

Threat Intelligence analysis and best practices.

Security Incident Response processes, procedures, and best practices.

Disaster Recovery and Business Continuity principles.