Senior Information Security Analyst (Third-Party Due Diligence)

Transamerica Corporation; City of Edinburgh; Hybrid; GBP 35,000 - 53,000; Full time

Job summary

An established industry player is seeking a Senior Information Security Analyst to enhance their Third-Party Due Diligence processes. This role offers a unique opportunity to work collaboratively in a hybrid environment, focusing on assessing and improving information security controls while supporting business inquiries. You will be part of a dynamic team dedicated to ensuring robust security measures across the organization, contributing to a culture of innovation and inclusivity. If you are passionate about information security and eager to make a meaningful impact, this position is perfect for you.

Benefits

Non-contributory pension (8%-12%)

Discretionary bonus

34 days leave per year

Private medical cover

Life assurance

Critical illness cover

Enhanced parental leave

Retail discount vouchers

Cycle2work scheme

Subsidised restaurant

Qualifications

• Experience in 3rd Party Due Diligence and knowledge of ISO27001 & ISO27002.
• Understanding of Information Security principles and risk assessment.

Responsibilities

• Maintain the Third-Party information security assurance framework.
• Conduct security reviews and support compliance assessments.
• Provide consultancy and training on Information Security.

Skills

3rd Party Due Diligence

ISO27001

ISO27002

Information Security policy

Risk assessment

Data Protection Act knowledge

Computer Misuse Act knowledge

SOX regulations knowledge

FSA regulations knowledge

Education

Relevant degree or qualification

Job description

Senior Information Security Analyst (Third-Party Due Diligence)

Permanent

Location: Edinburgh (We believe in the power of in-person collaboration, and our hybrid model requires colleagues to be in the office a minimum of 40% of their time)

Salary: A competitive salary from £35,120 - £52,680, depending on the experience you can bring

Closing date: 21st February 2025

We’re a company of around 2,500 innovators and thinkers who put our energy into helping customers. You can see this in our culture where we ask everyone to be brave, raise their game, deliver first time, help others, and act in everyone’s best interests.

We help people live their best lives. We help them with the big stuff, for the moments that matter: Pensions, Savings, Investments. At Aegon, we strive in creating a diverse organisation that plays a meaningful role in driving greater equity, inclusion and belonging.

We are currently hiring for Senior Information Security Analyst (Third-Party Due Diligence) to join our team in Edinburgh. In this role, you will undertake a wide range of activities that cover analysing and assessing the adequacy of information security controls, initiating improvements, provision of advice, supporting business enquiries, collating and analysing results for business returns and reporting. Key tasks will include:

• Assisting the Third-Party Information Security Manager to maintain the Third-Party information security assurance framework.
• Undertaking security reviews for the Aegon UK supplier population under the guidance of the Third-Party Security Assurance Managers.
• Assisting with the review of responses to more complex client security onboarding and annual due diligence security reviews.
• Responding to business requests relating to Information Security.
• Supporting with security risk assessments.
• Assisting with development of Information Security procedures and processes.
• Maintaining currency with work undertaken by the overall InfoSec Team to understand how changes to systems, servers and applications may affect security.
• Support the undertaking of compliance assessments, audits, reviews and workshops.
• Assisting with assessing information security policy exceptions.
• Developing and maintaining documentation.
• Providing consultancy, advice, guidance and training to all areas within Aegon UK.
• Information Security, which may include information security management, third party assurance, application security, project consultancy and assurance, network security, security incident management and user awareness.

We’d love to hear from you if you have:

• 3rd Party Due Diligence experience and knowledge, specifically relating to ISO27001 & ISO27002.
• Knowledge of Information Security policy, principles and techniques, information security standards.
• Knowledge of legislation and regulations relevant to Information Security (Data Protection Act, Computer Misuse Act, SOX, FSA regulations)
• An up to date and current knowledge of Information Security; current business and industry issues and initiatives.
• Experience of risk assessment in a business environment, understanding and determining business impact, determining risk from vulnerability, recommending appropriate and cost-effective controls.
• Desirable - A relevant degree or qualification. Will be encouraged to pursue a recognised Information Security Qualification.

What’s in it for you?

• A non-contributory pension between 8%-12%
• A discretionary bonus, depending on personal and company performance
• 34 days leave per year (including bank holidays, pro-rated for part-time)

We also offer private medical cover, life assurance, critical illness cover, enhanced parental leave and a variety of lifestyle benefits to help our employees live their best lives, including retail discount vouchers, cycle2work scheme, subsidised restaurant and online GP appointments.

Sound good? You know what to do… click the "Apply" button and see where it can take you.

The legal bits

We’ll need you to confirm you have the right to work in the UK. If we offer you a job and you accept, there are some checks we need to complete before you can start with us. This will include a credit and criminal record check, as well as providing satisfactory references.

Equal Opportunity Employer:

We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their age, disability, race, religion/belief, gender, sexual orientation or gender identity.