Information Security Analyst
Information Security Analyst
Up to £50,000 + 8% bonus | Bournemouth (Hybrid) | Permanent
Ready for your next step in information security? This is a chance to join a growing team at a well-known UK health and life insurer, learn from experienced people, and work on things that protect millions of members' data.
What you will be doing
-
Helping maintain and improve the ISMS so ISO 27001 certification is kept
-
Running internal audits against ISO 27001
-
Carrying out risk assessments on business processes, systems and projects
-
Helping mature Data Loss Prevention and Access Management
-
Working with project managers so security risks are picked up through the SDLC
-
Writing and maintaining security policies, standards and procedures
-
Carrying out security due diligence on third-party suppliers, including site visits
-
Supporting security awareness, audits and incident management
What you will bring
-
A couple of years in information security, IT risk, governance or compliance
-
A solid understanding of ISO 27001 (essential)
-
Experience of risk assessments and security policies
-
Knowledge of data protection and regulatory requirements (FCA, ICO)
-
Clear communication, with the ability to explain technical points simply
-
CISSP, CISA or CRISC, or the drive to study for one (an ISACA qualification would be ideal)
-
Desirable: ISO 27001 implementer or auditor, ITIL Foundation, financial services or insurance experience
Why this one
-
A growing team with real investment behind it
-
Room to develop and support towards professional qualifications
-
Broad exposure across risk, audit, DLP, access management and suppliers
-
A simple two-stage process, with offers before Christmas
Interested? Apply here or message me for a confidential chat.
Hannah Ford, Maru Search