Security Risk Analyst - Manchester

This job has now expired please search on the home page to find live IT Jobs.

Information Security Risk Analyst

Manchester

Were currently hiring for 2 IT Information Security Risk Analysts for a leading Manchester based law firm. One role will be more business focused while the other will be more technical from an IT/Security point of view.

You would join a leading successful global law firm reporting directly to the Information Security Officer. Some further information below, please advise if you would be interested in discussing the role and job specs in full.

* Assess information security risk and facilitate the remediation of identified vulnerabilities with the Firms network, systems and applications ensuring controls are proportionate, relevant and cost-effective.

* Identify opportunities to reduce risk.

* Report and track issues, control failures and recommendations for corrective action through to conclusion.

* Maintain the management information and reporting framework for information security controls.

* Manage with the completion and ongoing assessment of information security control gap analyses.

* Perform ISO 27001 audit and assurance reviews.

* Working with relevant business areas define the disaster recovery RTO/RPO through Business Impact Analysis (BIA)

* Identify information security requirements for new projects

* Identify information security requirements for merger and acquisitions

* Manage the security assurance process for key third party suppliers

* Manage with the maintenance of the information security policy suite

* Assist on the management of security incidents, undertake root cause analysis and prepare security incident reports

* Assist with the completion of bid and third-party assurance questionnaires.

* Provide information security advice to colleagues throughout the business

* Perform information security assurance assessments as required.