Information Security Analyst

  • fulltime
  • Bournemouth, BH2 6EP
  • £44,000 to £50,000 Annum

Information Security Analyst
Up to £50,000 + 8% bonus | Bournemouth (Hybrid) | Permanent

Ready for your next step in information security? This is a chance to join a growing team at a well-known UK health and life insurer, learn from experienced people, and work on things that protect millions of members' data.

What you will be doing

  • Helping maintain and improve the ISMS so ISO 27001 certification is kept

  • Running internal audits against ISO 27001

  • Carrying out risk assessments on business processes, systems and projects

  • Helping mature Data Loss Prevention and Access Management

  • Working with project managers so security risks are picked up through the SDLC

  • Writing and maintaining security policies, standards and procedures

  • Carrying out security due diligence on third-party suppliers, including site visits

  • Supporting security awareness, audits and incident management

What you will bring

  • A couple of years in information security, IT risk, governance or compliance

  • A solid understanding of ISO 27001 (essential)

  • Experience of risk assessments and security policies

  • Knowledge of data protection and regulatory requirements (FCA, ICO)

  • Clear communication, with the ability to explain technical points simply

  • CISSP, CISA or CRISC, or the drive to study for one (an ISACA qualification would be ideal)

  • Desirable: ISO 27001 implementer or auditor, ITIL Foundation, financial services or insurance experience

Why this one

  • A growing team with real investment behind it

  • Room to develop and support towards professional qualifications

  • Broad exposure across risk, audit, DLP, access management and suppliers

  • A simple two-stage process, with offers before Christmas

Interested? Apply here or message me for a confidential chat.

Hannah Ford, Maru Search

  • Internal Audit
  • PCI DSS
  • ISMS
  • Access Management
  • Risk Assessment
  • ISO 27001
  • Supplier Due Diligence
  • CISSP
  • Data Loss Prevention
  • CISA
  • CRISC
Apply