Information Security Analyst
Up to £50,000 + 8% bonus | Bournemouth (Hybrid) | Permanent
Ready for your next step in information security? This is a chance to join a growing team at a well-known UK health and life insurer, learn from experienced people, and work on things that protect millions of members' data.
What you will be doing
Helping maintain and improve the ISMS so ISO 27001 certification is kept
Running internal audits against ISO 27001
Carrying out risk assessments on business processes, systems and projects
Helping mature Data Loss Prevention and Access Management
Working with project managers so security risks are picked up through the SDLC
Writing and maintaining security policies, standards and procedures
Carrying out security due diligence on third-party suppliers, including site visits
Supporting security awareness, audits and incident management
What you will bring
A couple of years in information security, IT risk, governance or compliance
A solid understanding of ISO 27001 (essential)
Experience of risk assessments and security policies
Knowledge of data protection and regulatory requirements (FCA, ICO)
Clear communication, with the ability to explain technical points simply
CISSP, CISA or CRISC, or the drive to study for one (an ISACA qualification would be ideal)
Desirable: ISO 27001 implementer or auditor, ITIL Foundation, financial services or insurance experience
Why this one
A growing team with real investment behind it
Room to develop and support towards professional qualifications
Broad exposure across risk, audit, DLP, access management and suppliers
A simple two-stage process, with offers before Christmas
Interested? Apply here or message me for a confidential chat.
Hannah Ford, Maru Search