IS Security & Risk Analyst

Centrica plc; Windsor; On-site; GBP 45,000 - 75,000; Full time

Job summary

A leading energy company, known for its commitment to a sustainable future, seeks an IS Security & Risk Analyst to enhance its information security framework. This role involves evaluating and implementing security architectures, collaborating with teams, and ensuring compliance with standards like GDPR and PCI-DSS. The company offers competitive salary and comprehensive benefits, emphasizing work-life balance and employee well-being.

Benefits

15% Employee Energy Allowance

Comprehensive pension plan

Fully-funded healthcare plan

25-day holiday allowance

Flexible benefits package

Qualifications

• Deep knowledge of Information Security technical skills.
• Proficiency in secure reference architectures.
• Ability to analyse business needs for system architectures.

Responsibilities

• Define security requirements and provide advice on best practices.
• Review and recommend improvements on design documentation.
• Identify risks and opportunities across technical landscapes.

Skills

Information Security technical skills

Secure software development methodologies

Network security architecture concepts

Cloud provider offerings (Azure, AWS)

Job description

Join us, be part of more.

We’re so much more than an energy company. We’re a family of brands revolutionising how we power the planet. We're energisers. One team of 21,000 colleagues that's energising a greener, fairer future by creating an energy system that doesn’t rely on fossil fuels, whilst living our powerful commitment to igniting positive change in our communities. Here, you can find more purpose, more passion, and more potential. That’s why working here is #MoreThanACareer. We do energy differently - we do it all. We make it, store it, move it, sell it, and mend it.

An opportunity to play your part - At Centrica, the role of an IS Security & Risk Analyst is both dynamic and impactful. You'll be at the forefront of defining and implementing our information security architecture, ensuring that our security policies, standards, procedures, and controls are consistently administered. Your efforts will play a crucial role in enhancing our overall security posture, making Centrica a safer place for both our employees and customers. Join us and be part of a team that values innovation, collaboration, and a bit of fun along the way!

Location: UK, Windsor (talk to us about flexible working)

The day to day:

• Contributing to both High-Level and Low-Level Designs, ensuring robust security integration.
• Defining security requirements for projects and providing expert advice on security best practices.
• Reviewing and recommending improvements on design documentation from various business functions.
• Identifying risks and opportunities across our enterprise’s capabilities and technical landscapes.
• Reviewing and communicating information security policies, standards, and procedures.
• Advising the business on security issues and supporting the development of standardized architectures across applications, infrastructure management, deployment, and network environments.
• Collaborating with system developers and security engineers to select appropriate design solutions and ensure system component compatibility.
• Assisting with security assessments to ensure compliance with Centrica’s requirements.

About You:

• Deep knowledge of Information Security technical skills, including detailed security solutions, application architecture, and cloud provider offerings.
• Proficiency in secure reference architectures, encompassing infrastructure, network, and application design.
• Ability to analyse business needs and requirements to plan system architectures, with a keen awareness of emerging threats.
• Expertise in secure software development methodologies, tools, and DevSecOps practices.
• Strong understanding of network security architecture concepts, including topology, protocols, components, and principles like defence-in-depth.
• Familiarity with local, enterprise, and cloud-based networking architectures, especially Azure and AWS, and relevant security frameworks.
• Demonstrated ability to work effectively in teams, prioritizing competing demands to achieve timely and effective outcomes.
• Proven track record in performing security reviews, identifying gaps in projects, and developing security risk management plans.
• Experience in implementing information security program tools and solutions.
• Competence in assessing network and application design documents in collaboration with infrastructure security efforts.
• Knowledge of data security regulations and standards, including GDPR, ISO27001, and PCI-DSS.

What's in it for you?

• Enjoy a generous market salary, along with fantastic growth opportunities and a vibrant work environment!
• Power up your pay with a 15% Employee Energy Allowance, surpassing the government's price cap!
• Secure your future with our comprehensive pension plan, designed for peace of mind.
• Elevate your health with our fully-funded company healthcare plan, prioritizing your well-being.
• Recharge with a generous 25-day holiday allowance, plus public holidays, and even purchase up to 5 extra days for extended relaxation!
• Experience unparalleled work-life balance with an exceptional selection of flexible benefits, from tech treats and eco-friendly car leases to travel insurance for your adventures!

Why should you apply?

We’re not a perfect place – but we’re a people place. Our priority is supporting all of the different realities our people face. Life is about so much more than work. We get it. That’s why we’ve designed our total rewards to give you the flexibility to choose what you need, when you need it, making sure that you and your family are supported not only financially, but physically and emotionally too. Visit the link below to discover why we’re a great place to work and what being part of more means for you.

https://www.morethanacareer.energy/centrica

If you're full of energy, fired up about sustainability, and ready to craft not only a better tomorrow, but a better you, then come and find your purpose in a team where your voice matters, your growth is non-negotiable, and your ambitions are our priority.

Help us, help you. We would love for you to share any information about yourself throughout our recruitment process so that we can better understand you and help shape your journey.