Information Security Consultant

Leap29; Leeds; On-site; GBP 35,000 - 55,000; Full time

Job summary

A leading company in the security sector seeks an individual to enhance their security capabilities and resilience against threats at their Leeds location. The role involves assisting with security incident management, performing compliance checks, and ensuring adherence to best practices for disaster recovery. Ideal candidates will have at least two years of experience in security within an enterprise setting and possess a solid understanding of relevant security standards.

Qualifications

• At least two years of hands-on experience in security/infrastructure within an enterprise environment.
• Exposure to Cyber Essentials, ISO 27001, Data Protection Act, and GDPR.
• Experience with Microsoft O365 Security solutions and security operations.

Responsibilities

• Assist with security incident management and response activities.
• Perform daily, weekly, and monthly security checks and compliance checks.
• Test Disaster Recovery plans and capabilities.

Skills

Security Incident Management

Risk Identification

Vulnerability Management

Disaster Recovery

Threat Intelligence Analysis

Job description

Social network you want to login/join with:

Assist with security incident management and response activities.

Provide general day-to-day support in managing and responding to security alerts from systems and end users.

Perform daily, weekly, and monthly security checks, reconciliation, compliance checks, and investigate exceptions.

Complete client security requirement questionnaires and support the bidding process.

Identify and raise awareness of security risks.

Develop and enhance security policies, processes, procedures, and technical controls to strengthen security capabilities and resilience to cyber threats.

Take a proactive role in identifying security risks, mitigations, and opportunities to enhance resilience to cyber-attacks and security incidents.

Participate in the design and implementation of systems and applications.

Develop user and technical training guides.

Maintain and manage the IT Risk register.

Test Disaster Recovery (DR) plans and capabilities to ensure they function as designed, identify gaps, and incorporate lessons learned, working with the business to drive continual development and enhancement.

Technical Requirements:

At least two years of hands-on experience in security and/or infrastructure within an enterprise environment.

Exposure to enterprise information security standards including Cyber Essentials, ISO 27001, 27002, etc., Data Protection Act, and GDPR.

Experience with Microsoft O365 Security solutions, networking, security operations, vulnerability management, and security auditing.

Good understanding of security testing principles, including vulnerability scanning, risk identification, resolution, and reporting.

Experience in formal document creation, such as reports or procedures.

Detailed knowledge of:

Threat intelligence analysis and best practices.

Security incident response processes, procedures, and best practices.

Disaster recovery and business continuity principles.