Junior Information Security Officer

Steamship Insurance Management Services Ltd; London; Hybrid; GBP 30,000 - 45,000; Full time

Job summary

A leading P&I insurance company based in London seeks a Junior Information Security Officer to support the implementation of its information security management system. The successful candidate will assist in maintaining security standards, managing incidents, and ensuring compliance with regulations. Join a collaborative team that values integrity and offers a competitive hybrid working policy along with an attractive benefits package including private healthcare.

Benefits

Private healthcare

Wellbeing subsidy

Professional development opportunities

Qualifications

• Demonstrable interest in information security.
• Familiarity with security frameworks such as ISO27001, NIST, or CIS Controls.
• Basic understanding of networking and operating systems.
• Awareness of common threat vectors and incident response principles.

Responsibilities

• Assist in maintaining information security standards and guidelines.
• Participate in the risk management process to identify and monitor risks.
• Manage information security incidents and develop incident response plans.
• Audit security controls and report non-compliance.
• Conduct information security awareness training.

Skills

Analytical skills

Problem-solving

Communication

Team player

Education

Degree in Cybersecurity, Computer Science, Information Systems, or related field

Tools

Windows operating systems

Active Directory

Cloud environments

Job description

About the company

Steamship Mutual is a P&I insurance company, with 230 employees worldwide. The main office is based near Liverpool Street station, London. We have offices in Bermuda, Brazil, Cyprus, Greece, Hong Kong, Japan, and Singapore.

Overall Job Purpose:

The Junior Information Security Officer (JISO) will assist the Information Security team in implementing and maintaining the information security management system with the objective of managing risks to information assets to an acceptable level.

The JISO will develop a good understanding of the information security policies, standards and procedures and will assist InfoSec in implementing, managing and monitoring the relevant controls.

It is imperative that the JISO develops a strong understanding of the organisation’s technology landscape to help identify potential threats and vulnerabilities.

Key Responsibilities:

• Assist in maintaining the information security standards, procedures and guidelines.
• Participate in the information security risk management process to identify, assess, treat and monitor risks.
• Manage information security incidents and events to protect information assets. Help develop and implement incident response plans and procedures to ensure that information services are recovered in a timely manner in the event of a security breach.
• Track vendor and media disclosure of threats and vulnerabilities and advise on the appropriate courses of action.
• Audit security controls and report non-compliance. Assist in auditing the environment against new or updated legal and regulatory requirements, or the agreed industry standards.
• Assist with the quarterly cybersecurity ITSC and Board updates and key risk indicator reporting.
• Maintain the information security awareness training program and conduct phishing tests.
• Maintain the Privileged Access Management, Security and Event Management and Vulnerability Management systems.
• Assist in identifying security solutions that will be effective in mitigating risks to information assets. Manage the implementation and maintenance of the approved solutions.

Person Specification:

• Degree in Cybersecurity, Computer Science, Information Systems, or a related field.
• Demonstrable interest in information security (e.g. coursework, certifications, personal projects).
• Familiarity with security frameworks such as ISO27001, NIST, or CIS Controls.
• Basic understanding of networking, operating systems, and cloud environments.
• Awareness of common threat vectors, controls and basic incident response principles.
• Basic knowledge of Windows operating systems, Active Directory, Entra ID
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication.
• Ability to handle sensitive information with discretion.
• Eagerness to learn and adapt in a fast-paced environment.
• Team player with a proactive and detail-oriented mindset.

Join Us at Steamship Mutual

• Become part of our collaborative, supportive, and friendly working environment, where you can enjoy a rewarding career with opportunities to enhance your existing skills and knowledge. We prioritise a healthy work-life balance and offer a competitive hybrid working policy.
• Our clear and transparent career pathways provide continuous support for skill enhancement and create opportunities for professional development. Additionally, we offer access to the Protection & Indemnity Qualification, created by the International Group of P&I Clubs.
• Our attractive benefits package includes private healthcare and a competitive wellbeing subsidy.

Company Values

Mutuality ensuring fairness amongst Club Members

Integrity upholding high ethical, legal, and regulatory standards

Safety and Sustainability contributing to safety of life at sea and the preservation of the environment

Transparency building strong relationships based on trust and open communication

Excellence enabling our people to realise their full potential as team members, industry experts, leaders, and managers

Collaborative embracing flexibility, diversity, and inclusivity

**Steamship Insurance Management Services Ltd is committed to providing a great service to all our members. We pride ourselves on offering a people-centred culture that provides mutual respect and support for all our staff and we welcome and encourage you to apply**