Lead Information Security Analyst / Engineer

LANGLAND CONSULTANTS LTD; Chesterfield; Hybrid; GBP 50,000 - 55,000; Full time

Job summary

A leading company in Chesterfield is seeking a Lead Information Security Engineer/Analyst to oversee security practices and implement strategies to mitigate risks. The role involves developing policies, conducting risk assessments, and ensuring compliance with industry standards such as ISO27001 and PCI-DSS, as well as training staff in security awareness. If you have a strong technical background and a passion for information security, this is a great opportunity to contribute to a transformative organization.

Benefits

20% company contribution pension

Training opportunities

Child vouchers

Discounted leisure and travel scheme

32 days holiday plus bank holidays

Flexible working hours

Compressed hours options

Qualifications

• Exposure to technologies including ICT infrastructure, Cloud/SaaS.
• Comprehensive knowledge of Information Security Management systems.
• Previous experience managing security threats and incident management.

Responsibilities

• Oversee information security and compliance practices.
• Conduct risk assessments to identify security vulnerabilities.
• Implement plans for responding to security issues.

Skills

Information Security Management

Risk Management

ISO 27001

IT Security Principles

Vulnerability Management

Education

Formal Security Qualification or Degree

Job description

Lead Information Security Analyst / Engineer to GBP55k + Benefits

ISO27001, COBIT, SECURITY, ITIL, CISM, CISSP, PCI–DSS

Lead Information Security Engineer/Analyst:

Do you have a background working in an IT Security function ? Do you have a broad technical skill set and are able to identify and remediate threats or vulnerabilities, implement information security strategies to mitigate risk, and put process in place to alleviate security issues? Do you have a background in Governance and maintaining up–to–date policies and procedures?

Are you passionate about technology, with a strong customer service ethos, focused on keeping abreast with Information Security Management frameworks and standards ( ISO2701, COBIT, ITIL)

Lead Information Security Engineer/Analyst About the company:

Do you want to be part of a successful organisation, that strives to offer stable, sustainable, and thriving communities in their local area. They have a vision and purpose to make a difference by the services they offer across a variety of services in their local area.

With offices based in Chesterfield, they are involved in a major transformation, within the local area. They are investing in improving their services to best meet the changing needs of their customers / users.

Lead Information Security Engineer/Analyst – About the role:

The Security Engineer/Analyst role will be office based in their Chesterfield office,( on average 2–3 days per week) working as part of a small team, provide effective solutions to escalated security issues, and provide a high level of security expertise to the business, across information systems, networks, and data.

You will primarily be focused on playing a critical role developing and implementing information security policies, strategies, and procedures to help safeguard their digital assets and mitigate against potential risks. You will be actively responsible for ensuring the successful achievement of external certifications such as ISO27001, MOU, PSN and PCI–DSS etc alongside managing security incident response plans.

In addition, the Lead information Security Analyst / Engineer will provide advice and guidance on government standards and industry best practice relating to information security maintain compliance to these standards.

Lead Information Security Engineer/Analyst – Key Responsibilities:

1. Oversee information security, compliance and risk management practices following industry frameworks
2. Take ownership of and establish information security policies, standards and procedures ensuring confidentiality and integrity
3. Conduct regular risk assessments to identify security vulnerabilities and potential threats and implement strategies to mitigate risk
4. Implement plans and protocols to respond to security issues
5. Educate other colleagues and employees in security awareness programmes / training sessions in relation to security compliance and best practice
6. Maintain and develop good working relationships with 3rd part suppliers ensuring they meet security standards
7. Monitoring events / alerts from multiple technologies to detect potential malicious activity
8. Ensure effective compliance with relevant laws, regulations, and industry standards such as GDPR, ISO27001, PCI– DSS etc by conducting audits, maintaining documentation etc
9. Support the Head of Digital, Data and Technology to develop, monitor and report on budget that is in line with business & financial objectives

Lead Information Security Engineer/Analyst– Essential Skills:

Candidates must have some exposure to most of the technologies listed below:

• Comprehensive knowledge of Information Security Management systems and ability to scope, design and implement such systems
• Previous experience in ICT infrastructure, application, and Cloud / SaaS technical skills
• Knowledge & understanding of ISO 27001, ITIL and ideally Prince 2 methodology
• Leadership qualities to lead a workforce and enhance their information security knowledge
• Ability to deal with high complex / risk problems across a diverse range of security threats
• Good knowledge of IT Security Principles
• All round experience of vulnerability management, information security incident management alongside IT Service and Asset management systems
• Any formal Security qualification or Degree will be advantageous

Lead Information Security Engineer/Analyst – Benefits

• Basic salary of up to GBP55k on offer
• Pension – 20% company contribution
• Training opportunities
• Child vouchers, discounted leisure, and travel scheme.
• 32 days holiday plus bank holidays
• Hybrid working ( 2 days per week from home)
• Flexible working hours / compressed hours options

Candidates will have a strong customer service ethos and passion for resolving issues to a high standard following company guidelines. Candidates will have a broad technical skill set and be keen to look at learning new technologies including and have an interest in emerging security technology. The Security Engineer role offers the chance to play a leading role in this organisation's information security set–up and contribute your own ideas ( within best practice) to enhance and sustain their Information Security Management

Langland Consultants acts as an Employment Agency/Business with regards to this vacancy. As an Equal Opportunities employer, Langland Consultants welcomes applications regardless of race, gender, nationality, ethnic origin, sexual orientation, religion, marital status, disability, or age. All applicants are considered on the basis of their merits and abilities for the job.

By applying to a job advertised by Langland Consultants or providing your contact information to show interest in a job advertised by Langland Consultants, you consent to the disclosure of your information to us in order to assist our legitimate business needs.

This includes agreeing to us in storing your information and allowing us to contact you in regard to suitable job opportunities in the future.