Information Security Senior Analyst

Allianz; Guildford; Hybrid; GBP 65,000; Full time

Job summary

A leading UK insurance company is seeking a Senior Information Security Analyst to lead Information Security strategies and compliance initiatives. The role involves executing the NIST Cyber Security Framework and managing governance processes. Candidates should have at least 4 years’ experience in information security and strong analytical skills. This position offers a salary of approximately £65,000 and various flexible benefits.

Benefits

Flexible buy/sell holiday options

Annual performance related bonus

Contributory pension scheme

Development days

Retail discounts

Qualifications

• Minimum of 4 years of experience in information security.
• Solid understanding of Information Security control frameworks.
• Practical experience implementing NIST CSF highly desirable.

Responsibilities

• Execute Information Security strategies supporting GRC.
• Lead day-to-day GRC activities and manage non-compliance issues.
• Develop information security controls catalogue and policies.

Skills

Information Security governance frameworks

Data analysis

Communication skills

Education

Bachelor's degree in Information Security or related field

Master's degree

Tools

Excel

Power BI

Job description

Role Description

As a Senior Information Security Analyst at Allianz UK, you will be instrumental in executing the company's Information Security strategies and initiatives, focusing on supporting the Governance, Risk, and Compliance (GRC) function and implementing the NIST Cyber Security Framework (CSF) throughout the organization. You will lead day-to-day GRC activities, including designing security controls, enforcing requirements from the Group Information Security Framework, and proactively managing non-compliance issues and mitigating Information Security risks.

Salary Information

Pay: Circa £65,000 per year.

Pay is based on relevant experience, skills for the role, and location. Salary is only one part of our total reward package.

About You

• You will be developing and implementing an information security controls catalogue, policies, and procedures aligned with the NIST Cyber Security Framework (CSF).

• Conducting assessments to identify material gaps, analyzing potential risks, and monitoring progress on maturity uplifting across security functions.

• Supporting compliance activities with the Group Information Security Framework, Cyber Essentials, and PCI DSS attestation.

• Collaborating with the wider organization to integrate control testing and risk management activities into the existing governance framework.

• Assisting cross-functional teams and business units in integrating security measures into business operations.

• Facilitating regular reviews and updates of control and risk management processes to remain effective and responsive to emerging threats and changes in the organizational landscape.

• Documenting and visualizing reports for governance forums, providing insights and recommendations to inform decision-making and risk management strategy across the business.

Essential Skills

• Minimum of 4 years of experience in information security, with solid understanding of Information Security control and governance frameworks.

• Practical experience of implementing NIST CSF in the financial services sector is highly desirable.

• Proven track record of security transformation and delivery of security projects, particularly within a federated organisation.

• Strong knowledge of Information Security and compliance frameworks, including NIST CSF, ISO 27001, Cyber Essentials, PCI DSS, and DORA, and the ability to design controls that align with these standards.

• Ability to analyse data and generate reports using tools like Excel and Power BI, and experience with data visualisation and interpretation.

We support the government scheme "Access to Work" please feel free to ask us about the access to work scheme.

Desirable Skills

• Skills in creating and maintaining comprehensive documentation, including control matrices, design process flows, and standard operating procedures.

• Strong communication and interpersonal skills, with the ability to convey complex security concepts to non-technical stakeholders.

• Bachelor's degree in Information Security, Computer Science, or a related field. A Master's degree is a plus.

• Relevant certifications such as CISSP, CCSP, CRISC, CISM, or ISO 27001 Lead Implementer are highly desirable.

What We Will Offer You

Recognised and rewarded for a job well done, we have a range of flexible benefits for you to choose from- so you can pick a package that's perfect for you. We also offer flexible working options, global career opportunities across the wider Allianz Group, and fantastic career development and training. That's on top of enjoying all the benefits you'd expect from the world's number one insurance brand, including:

• Flexible buy/sell holiday options
• Hybrid working
• Annual performance related bonus
• Contributory pension scheme
• Development days
• A discount up to 50% on a range of insurance products including car, home and pet
• Retail discounts
• Volunteering days

Our Ways of Working

Do you need flexibility with the hours you work? Let us know as part of your application and if it's right for our customers, our business and for you, then we'll do everything we can to make it happen. Here at Allianz, we are signatories of the ABIs flexible working charter. We believe in supporting hybrid work patterns, which balance the needs of our customers, with your personal circumstances and our business requirements. Our aim with this is to help innovation, creativity, and you to thrive - Your work life balance is important to us.

Integrity, Fairness, Inclusion & Trust

At Allianz, we believe in fostering an inclusive workforce and are proud to be an equal opportunity employer. Our commitment to equal opportunities, gender equity, and balanced gender representation, is demonstrated by our numerous accreditations: EDGE certified for gender inclusion, Women in Finance Charter members, Disability Confident employer, Stonewall Diversity Champion, Business in the Community's Race at Work Charter signatories, and Armed Forces Covenant gold standard employer.

We embrace neurodiversity and welcome applications from neurodivergent and disabled candidates, offering tailored adjustments to ensure your success.

We encourage our employees to advocate for their needs, whether it's assistive technology, ergonomic equipment, mentoring, coaching, or flexible work arrangements.

Accessible Application for All

As part of the Disability Confident Scheme, we support candidates with disabilities or long-term health conditions through the Offer an Interview Scheme, for those meeting the essential skills for the role.

Contact our Resourcing team to opt into this scheme or for assistance with your application, including larger text, hard copies, or spoken applications.

[e-mail]

For any inquiries or to submit your application, please contact: Matthew Irvine

If you are an at-risk candidate facing potential redeployment, please include this information in your CV.

Closing date: 4/07/2025

We reserve the right to close the advert early if we reach enough applications.

Join us - Let's Care for Tomorrow.

#LI-Hybrid

74560 | IT & Tech Engineering | Management | PG10 | Allianz UK | Full-Time | Permanent