Information Assurance Analyst

About the role

Role responsibilities

• Advise on and drive technical security best practices through routine and ad-hoc audits and governance activities.
• Identify non-compliance and risk, and support appropriate remediation plans and activities.
• Manage post-audit remediation plans and actions to drive departmental security improvements.
• Provide security assurance, risk, and compliance support across technology services.

Essential requirements

• Practical experience in information security, cybersecurity, information assurance, IT risk, GRC, or technology audit.
• Working knowledge of ISO 27001 and ISMS, risk-based security, security control assessment, and familiarity with the NIST Cybersecurity Framework.
• Experience supporting or conducting security audits, compliance assessments, control assessments, or assurance reviews.
• Experience documenting security risks, control deficiencies, and non-conformities and supporting remediation.
• Able to assess requirements and control evidence and make evidence-based recommendations; strong communication, analysis, research, problem-solving, and attention to detail.
• Understanding of enterprise security controls, including identity and access management, vulnerability management, endpoint and network security, secure configuration, logging and monitoring, data protection, and incident management.
• Able to build relationships, challenge control owners appropriately, and prioritise multiple activities and deadlines.
• Must be able to obtain and maintain the required UK Security Clearance.

Desirable qualifications

• Relevant qualifications or certifications, or working toward them, such as ISO 27001 Internal Auditor/Lead Auditor, CISSP, CISM, CRISC, or equivalent, are desirable.

Location and work arrangement

• The posting states a hybrid role. Gloucester or Manchester is preferred; other listed options are Harlow, Glenrothes, and Livingston.
• The role is full time, with 37-hour dayshift hours.

Benefits

• Benefits include 25 days of holiday plus public holidays, a contributory pension, a discretionary bonus, life assurance, flexible benefits, enhanced sick pay, and enhanced family-friendly policies.
• The employer describes a collaborative environment and opportunities for professional development.