Information Security Analyst

This job has now expired please search on the home page to find live IT Jobs.

Information Security Analyst to be based in Milton Keynes on an initial 6 Month contract. Experienced Information Security Analyst responsible for the ongoing investigation and analysis of Information Security and IT Risks.

Job Title - Information Security Analyst

Location - Milton Keynes

Rate - £ 550 per day

Duration - 3 Months

The Risk & Security Analyst will report to the Local Information Security Officer (LISO) within the IT Governance team and is responsible for the ongoing investigation and analysis of Information Security and IT Risks. The role has accountability for the monitoring of Information Security and IT Risks, ensuring agreed information security controls and prevention measures are implemented.

The Risk and Security Analyst is responsible for monitoring Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) as well as Information Security breaches and the delivery of remediation and improvement measures.

In addition, the role is also responsible for maintaining policies for IT Risk and Information Security and for arranging awareness training for Client employees.

The Risk and Security Analyst 4 key domains of responsibility.

* IT Security and Risk Monitoring and Analysis.

* IT Security and Risk Prevention and Remediation

* IT Security and Risk Policy Management

* Training on IT Security and Risk

MAIN RESPONSIBILITIES

* Develop, manage and maintain Information Security and IT Risk monitoring activities, based on direction from LISO and LIRO.

* Supports the development of the Information Security Management System and IT Risk Management Framework, by recommending enhancements and best practice to LIRO and LISO.

* Responsible for maintaining and implementing Information Security and IT Risk procedures , in accordance with global standards, local needs and leading practice.

* Develop and maintain IT Security and Risk Reporting to ensure transparency and enable effective management of Information Security and IT Risk.

* Organise appropriate vulnerability testing, risk analysis and security assessments, based on direction from LISO and LIRO.

* Responsible for investigating security breaches to determine their root cause, commissioning of additional forensic analysis, if required. Propose remediation measures for approval.

* Responsible for planning and co-ordinating Information Security and IT Risk remediation activities. Engages with technical teams to ensure changes are delivered successfully.

* Implement and co-ordinate measures to protect data and information systems against unauthorised access, modification or destruction.

* Responsible for planning and scheduling agreed penetration testing activities with third parties, to simulate attacks and expose vulnerabilities before they can be exploited.

PRINCIPAL CONTACTS / WORKING RELATIONSHIPS

* LIRO and LISO - Security and Risk monitoring, assessment, reporting, investigation, action and policy.

* Client UK Business Functions - IT Risk and Information Security awareness training. Technical advice.

* Client IT - Engage with IT teams on security action, remediation, compliance and reporting. Provide advice on security topics and policy when required.

* IT Leadership - reporting, metrics and analysis.

* Risk Control & Internal Audit - engage on oversight and 3 lines of defence model.

* External 3rd party security experts and technical partners to commission additional expertise and capabilities.

* 3rd Party IT service providers, in relation to security standards, compliance and reporting.

* Client HQ - Reporting, oversight & global standards. Security Incident response and intervention.

Candidates should submit CVs in the first instance. Mike Tripp 0161 924 3631