Senior Information Security Analyst

UK Research and Innovation; Swindon; On-site; GBP 45,000 - 55,000; Full time

Job summary

A leading research organization in the UK is seeking an Information Security Specialist to ensure the security of its IT infrastructure. The role involves collaborating with various teams to mitigate security risks, implementing effective security solutions, and preparing metrics for senior leadership. Candidates should have a degree or relevant certification and significant experience in information security frameworks. The position offers a salary of £45,272 along with excellent benefits including a defined benefit pension scheme and generous annual leave.

Benefits

Defined benefit pension scheme

30 days' annual leave

Employee discounts

Flexible working options

Employee assistance programme

Qualifications

• Solid experience with risk assessment methodologies.
• Proficient in communicating complex security concepts to non-technical stakeholders.
• Demonstrable knowledge of information security frameworks.

Responsibilities

• Work collaboratively to identify and mitigate risks.
• Advise on and implement effective security solutions.
• Lead collection and analysis of InfoSec performance metrics.

Skills

Risk assessment methodologies

Vulnerability management processes

Strong analytical skills

Problem-solving skills

Attention to detail

Communication skills

Leadership in security initiatives

Education

Degree in a related subject

Professional certification (e.g., CISM, CISSP)

Job description

Overview

Join us for this rare opportunity to apply your expertise in information security in a dynamic, fast-paced security operational and strategic role in an organisation at the heart of research and innovation in the UK. Working as part of a team of technical specialists, your broad remit is to ensure the security and integrity of the organisation's IT infrastructure. You will work closely with development, operations, architecture and security teams to implement and maintain secure systems and protocols, monitor for security threats, respond to incidents, and continuously improve the security posture.

Security

As a minimum, due to the nature of this role, candidates must be eligible for clearance in line with UK National vetting guidelines and willing to undertake the process. Please indicate eligibility in the written submission. Candidates not meeting this level of clearance will not be considered. The level of clearance required is security check.

Responsibilities

• Work collaboratively across the organisation to identify, assess, and mitigate risks, ensuring security policies and processes align with organisational objectives and regulatory requirements.
• Advise stakeholders and implement effective security solutions, providing oversight for vulnerability assessments, remediation activities, and technical control evaluations.
• Promote a culture of security by participating in awareness programs, supporting internal and external audits, and assisting in the development of policy, standards, and procedures.
• Lead the collection, analysis, and presentation of InfoSec performance metrics, and prepare briefings for senior leaders on studies and plans.
• Analyse data from security assessment tools and systems, identify process inefficiencies, and contribute innovative solutions to improve security and efficiency across projects and initiatives.

UKRI is an Equal Opportunity & Disability Confident Employer. Please apply online. If you experience any issue applying, please contact [e-mail]. Feedback will only be provided if you attend an interview or assessment.

Security and Eligibility

• Successful candidates must undergo a criminal record check and meet the security requirements before appointment. The level of security needed is security check.
• See our vetting charter. People working with government assets must complete baseline personnel security standard checks.

Nationality requirements

• This job is broadly open to the following groups: UK nationals, nationals of the Republic of Ireland, nationals of Commonwealth countries who have the right to work in the UK, nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members with settled or pre-settled status under the EU Settlement Scheme (EUSS), those who have made a valid application for settled or pre-settled status under EUSS, and certain other categories as described.

Qualifications

• A professional certification (e.g., CISM, CISSP, CompTIA Security+, CCSP or AWS certification).
• Degree in a related subject or relevant comparable education.
• Solid experience with risk assessment methodologies and vulnerability management processes, including relevant tooling.
• Excellent analytical, problem-solving, and decision-making skills, with strong attention to detail.
• Proficient in communicating complex security concepts to non-technical stakeholders and collaborating across departments and third-party providers.
• Demonstrable knowledge of information security frameworks, regulations (such as ISO27001, NIST, and GDPR), and security technologies and controls.
• Proven ability to lead and drive security initiatives, respond to security incidents, and conduct investigations.
• Comprehensive understanding of information security management concepts.

Salary and Benefits

Alongside your salary of £45,272, UK Research and Innovation contributes £13,115 towards you being a member of the Civil Service Defined Benefit Pension scheme. Benefits include:

• An outstanding defined benefit pension scheme
• 30 days' annual leave in addition to 10.5 public and privilege days (full time equivalent)
• Employee discounts and offers on retail and leisure activities
• Employee assistance programme, providing confidential help and advice
• Flexible working options
• Plus many more benefits and wellbeing initiatives

For further information on our benefits please see: Benefits of working at UK Research and Innovation (UKRI)

How to apply

Please apply online. If you experience any issue applying, please contact [e-mail]