Information Assurance Analyst

Role overview

Responsibilities

• Advise on and promote technical security best practices through routine and ad hoc audit and governance work.
• Identify non-compliance and risks and support appropriate remediation plans and activities.
• Manage post-audit remediation plans and actions to drive department-wide security improvements.
• Support the organisation's information security and assurance posture with security assurance, risk, and compliance work.

Essential experience and knowledge

• Practical experience in information security, cybersecurity, information assurance, IT risk, GRC, or technology audit.
• Working knowledge of ISO 27001, ISMS, risk-based approaches, security controls, and the NIST Cybersecurity Framework.
• Experience with security audits, compliance and control assessments, or assurance reviews.
• Ability to document risks, control deficiencies, and non-conformities and support remediation.
• Understanding of enterprise security controls such as identity and access management, vulnerability management, endpoint and network security, secure configuration, logging and monitoring, data protection, and incident management.
• Ability to analyse evidence and provide clear recommendations; strong communication, analytical, research, problem-solving, relationship-building, and prioritisation skills.
• Must be able to obtain and maintain the required UK Security Clearance.

Desirable qualifications

• Relevant qualifications or certifications, or working toward them, are desirable; examples include ISO 27001 Internal Auditor or Lead Auditor, CISSP, CISM, or CRISC.

Schedule

• Full-time role with stated hours of 37 hours on day shift.

Workplace and locations

• The position is described as hybrid.
• Gloucester or Manchester is preferred; other options listed are Harlow, Glenrothes, and Livingston.

Benefits

• Benefits listed include 25 days of holiday plus public holidays, pension contributions, discretionary bonus, life assurance, flexible benefits, enhanced sick pay, and family leave policies.