ICT Security Analyst - Governance

This job has now expired please search on the home page to find live IT Jobs.

Are you looking for a role with a high level of autonomy, allowing you to be seen as the subject matter expert in ICT Security Governance?  

There are a lot of great things happening at Your Housing Group making it a good time to join the business and get involved. We are currently implementing significant investment into Digital and Organisational transformation and our ICT Team is growing and evolving significantly.  

This is a great time to join an organisation which aspires to be a model of good practice for legislation, regulation and InfoSec management and is committed to continuous improvement in this area, protecting both customers and our organisation in equal measure.  

Due to this growth we are expanding our Information Security & Governance capability and as a result, we have an exciting opportunity for an experienced ICT Security Analyst (Governance)  

You will support the implementation, development and execution of the overall governance of ICT security, protecting the business from security threats, cyber-hacking, general ICT control gaps and disaster recovery. You will also take the lead and provide a focal point for a range of security related activities such as compliance with policies and standards, vulnerability management, monitoring and reporting, risk and threat assessment, incident response, business continuity and disaster recovery, supporting plans to develop and improve Information Security and compliance to all ISO and other standards and regulations at YHG.  

If you have a majority of the following experience, we would like to hear from you:  

Information security risk management, policy governance, control assurance and security reporting

Implementing, maintaining and developing Security policies and procedures, continually monitoring and improving ICT Security controls in response to new threats and compliance requirements;

Developing and producing Security KPI's to inform ICT and Corporate risk reporting, registers and dashboards;

Monitoring security policy compliance among employees and contractors;

Analysing security outputs from various technologies to effectively investigate and resolve security incidents to a high standard;

Developing and implementing business continuity plans to ensure service is continuous when a change programme is introduced, or a security breach occurs or in the event the DR recovery plan is invoked;

Performing risk and business impact analysis, control effectiveness reviews and evaluate regular internal and external vulnerability assessments, providing management reports and recommendations and manage the implementation of appropriate mitigations;

Responsible for PCI DSS and ICT related GDPR compliance monitoring programs as well as supporting work towards Cyber Essentials & ISO27001 accreditation;

Provide gap analysis of current information assurance and risk management processes, and develop plans to remediate gaps and support audit initiatives;

Identify, analyse, and understand external threats in order to update information security standards and incorporate appropriate controls into the security framework;                      

In return we offer a competitive salary of £42,000 - £52,750, Plus a great benefits package including - Flexible working, 25 days holiday (22 contractual and 3 non-contractual for Christmas shutdown), plus all bank holidays, (plus an option to buy further holidays), pension (matched up to 8%), Life insurance, medical benefits scheme, subsidised gym memberships and discounted shopping vouchers /Half price cinema tickets.