Information Assurance Analyst

Role overview

Location and work arrangement

• The role is hybrid.
• Gloucester or Manchester is preferred; other listed location options are Harlow, Glenrothes, and Livingston.
• The posting lists 37-hour dayshift work.

Essential requirements

• Practical experience in information security, cybersecurity, information assurance, IT risk, GRC, or technology audit.
• Working knowledge of ISO 27001, ISMS, risk-based security, and security control assessment; familiarity with the NIST Cybersecurity Framework.
• Experience with security audits, compliance assessments, control assessments, or assurance reviews, including documenting risks and supporting remediation.
• Ability to analyse security requirements and control evidence and make clear, evidence-based recommendations.
• Understanding of common enterprise security controls, including identity and access management, vulnerability management, endpoint and network security, secure configuration, logging and monitoring, data protection, and incident management.
• Strong communication, analytical, research, and problem-solving skills; attention to detail; and ability to manage priorities and work with stakeholders.
• Ability to obtain and maintain the required UK Security Clearance (SC).

Desirable qualifications

• Relevant professional qualifications or certifications, or working toward them, such as ISO 27001 Internal Auditor/Lead Auditor, CISSP, CISM, CRISC, or equivalent.

Responsibilities

• Advise on and drive technical security best practices through routine and ad hoc audit and governance activities.
• Identify non-compliance and risks and support appropriate remediation plans and activities.
• Manage post-audit remediation plans and actions to improve security across the department.

Benefits

• Benefits listed include competitive salaries, 25 days of holiday plus public holidays, pension contributions, a discretionary company bonus, life assurance, flexible benefits, and enhanced sick pay and family-friendly policies.