Junior Information Security Analyst

City FM Ltd; Glasgow; On-site; GBP 30,000 - 45,000; Full time

Job summary

City FM Ltd is looking for a motivated individual to join their Information Security Team. This permanent position involves managing security risks, ensuring compliance with standards like ISO 27001 and GDPR, and contributing to security initiatives. Ideal candidates will possess relevant qualifications and experience, particularly in risk assessment and data protection.

Qualifications

• Degree or equivalent in Information Security or related field.
• Relevant security certifications such as ISC2 Certified in Cybersecurity or CompTIA Security+.

Responsibilities

• Contribute to risk assessments and identify security risks.
• Monitor security initiatives and support compliance activities.
• Assist with third-party security due diligence and audits.

Skills

Stakeholder relationship building

Risk analysis

Decision-making

Data protection compliance

Communication

Education

Degree in Information Security or related field

Tools

PowerBi

Job description

This is a permanent vacancy that will close in 20 days at 23:59 BST.

The Vacancy

Position Overview:

This role is within the Information Security Team and will support the development, implementation, and execution of the Information Security Management System to protect the business from security threats. Responsibilities include security risk and threat assessments, 2nd line control testing, monitoring, and reporting of security compliance against ISO 27001 and GDPR activities.

Principal Tasks and Responsibilities

• Contribute to risk assessments, identify security risks, threats, and mitigation measures.
• Monitor security initiatives and risk mitigation to ensure continuous improvement.
• Support the annual information security plan, including audits, tests, risk assessments, and policy updates.
• Assist with third-party security due diligence.
• Perform GDPR compliance activities such as data protection impact assessments, breach responses, and data subject requests.
• Promote awareness of information security and data protection throughout City.
• Perform other duties as appropriate for the role and skillset.

Key Result Areas

• Maintain ISO 27001 certification.
• Align with NIST CSF target maturity.
• Ensure GDPR compliance.
• Meet customer-specific security requirements.

Skills and Experience

Essential

• Degree or equivalent in Information Security or related field.
• Relevant security certifications such as ISC2 Certified in Cybersecurity or CompTIA Security+.

Desirable

• Knowledge of ISO 27001/NIST CSF standards.
• Understanding of GDPR and data privacy guidance.
• Technical knowledge of networks, operating systems, and security technologies.
• Experience with audit and risk assessment processes.

Skills

• Ability to build stakeholder relationships.
• Strong risk analysis and decision-making skills.
• Excellent verbal and written communication skills.
• Experience with control testing and PowerBi reporting.

Behaviours

• Good business sense, proactive, eager to learn.
• Excellent interpersonal skills, creative, pragmatic, flexible.
• Ability to communicate effectively across all organizational levels.

The Company

Founded in 1985 by Willie and Susan Haughey, City Refrigeration Holdings aims to positively impact the facilities management industry. Built on collaboration and transparency, the company has grown into a trusted global facilities management provider with divisions across Europe, Australia, North America, and Asia, offering services including maintenance, engineering, procurement, cleaning, and support across various markets.