Information Security Analyst - Hatfield - Hybrid - up to £60k + Excellent Bens
About the company:
Global Technology powerhouse pioneering the future of transport & logistics through disruptive innovation and automation. They create world-class systems at the intersection of robotics and IoT, cloud platforms, big data, machine learning, software development, and beyond.
What you will be doing:
As the Information Security Analyst will support the InfoSec GRC team in all aspects of information security across the whole organisation, including overall information security governance, compliance programs, third-party vendor risk management, education, and Vendor Risk Management tool administration.
This role is not a technical hands on role, but would suit an individual who has a
technical background having worked with a range of technology and security tools who is now looking for an information security GRC role.
You’ll be working on things like;
● Contributing to the creation and refreshment of information security documents, policies, processes and procedures.
● Working with business stakeholders and project teams to understand, scope and define security requirements.
● Assisting in developing control testing strategies, to ensure our security controls are meeting their objectives.
● Performing internal security and vendor risk assessments.
● Supporting Data Protection activities.
● Supporting the Information Security teams and Business functions in maintaining security attestations, which include PCI DSS and SSAE18/SOC 2.
● Providing effective reporting to the Head of Information Security Governance of trends, audit findings and risk ratings.
● Performing internal and third-party vendor risk assessments, and writing risk assessment reports.
● Managing and analysing security controls, while understanding the risk of certain controls not being in place.
What we’re looking for:
● Experience in an Information Security GRC related role, including writing Information Security related Policies, Processes and Procedures
● Knowledge of current information security standards, frameworks and regulations such as ISO27001, NIST, SSAE18/SOC 2, PCI-DSS, GDPR.
● Third-Party Vendor Risk Management experience
● Good communication skills with ability to articulate compliance changes and experience in collaboration with internal / external stakeholders
Nice to have (but not essential):
● Knowledge of Vendor Risk Management tools such as OneTrust
● Any of the following: CISA, CRISC, or CISM certifications
What is in it for me:
● 30 Day ‘work from anywhere’ policy +
● Remote working for the month of August
● 25 days annual leave, rising to 27 days after 5 years service (plus optional holiday purchase)
● Pension scheme (various options available including employer contribution matching up to 7%)
● Private Medical Insurance
● 22 weeks paid maternity leave and 6 weeks paid paternity leave (once relevant service requirements complete)
● Train Ticket loan (interest-free)
● Cycle to Work Scheme
● Opportunity to participate in Share save and Buy as You Earn share schemes
● Income Protection(can be up to 50% of salary for 3 years) and Life Assurance(3 x annual salary)
For more information and immediate consideration apply today
