TITLE: Information Security Analyst
LOCATION: Skipton, North Yorkshire – UK
RELOCATION/VISA: N/A
SALARY: to £40k + Benefits
COMPANY: On request
KEY REQUIREMENTS:
CISA or CISSP qualified
Experience working in Technical IT Role, IT audit role or IT Risk Management Role
Experience working in a specialist Information Security role whose main focus is Internal Audit
Previous experience of ISO27001
Identify information security risks as part of scheduled reviews or security incidents in all areas of the business and provide recommendations on resolution
Ability to work well in a team and able to deal with people at all levels, both internally and externally
Strong PC literacy skills
Close attention to detail and quality conscious
Excellent written and verbal communication skills
Valid drivers licence
JOB DESCRIPTION:
Providing assurance that the confidentiality, integrity and availability of our client, its clients and customers data is maintained by carrying out the following:
Undertaking reviews of our clients and third party suppliers follow the ISO27001 Information Security Standard and Payment Card Industry Data Security Standard to ensure the adequacy and appropriateness of the information security controls at both our client and the suppliers.
Validation of all IT related audit findings from internal, external and SAS70 audits and reviews.
Monitor and investigate and report on security incidents following the formal process.
Participate in the Change Management process and attend the Change Management Forum to ensure Information Security risks are considered for any changes.
Promote Information Security Awareness within the business
Maintain and develop the Information Security Management System
Provide guidance and assurance that Information Security risks are identified in new projects and that industry best practise is followed to mitigate these risks
Assist in ongoing compliance with ISO27001, Data Protection Act and other applicable legal and regulatory requirements.
Ensure that the client achieves and maintains PCIDSS certification
Support the Information Security Manager in the day-to-day running of the Information Security Team.
FURTHER INFORMATION:
Duration: Permanent
Start date: ASAP
Click here to apply for this position.
