Job Description

Information Security Analyst 
PCD330057

The organisation, an International bank, based in the organisation, is looking for an Information Security Analyst to join it is team. Three MUST for this role: 1) Three days per week in the office 2) They dont offer sponsorship 3) You must come from banking or the organisation background 4) Must have at least 2/3 years experience in your current firm

About the Information Security Analyst role:
To assist the Branch Information Security Officer in developing and maintaining the Branch ISMS, and in providing a professional responsive service to assist management in identifying and mitigating information security risks which could seriously impact the Bank.
This includes the provision of expert advice, oversight, and assurance on, the selection, design, justification and operation of information security controls and management strategies to maintain the confidentiality, integrity, availability, accountability, and relevant compliance of information systems with legislation, regulation, and relevant standards, in concert with Bank Head Office alignment.

KEY RESPONSIBILITIES

To maintain Information Security assurance activity (structured and unstructured) to assess and report on divergence from policy or agreed standards (control objectives) or to identify opportunities for improvement, thus allowing flaws to be redressed and continual improvement for 1st Line of Defence (1LoD)
To track, and report on, findings and actions arising from Information Security reviews, audits, and incidents and in update of Management Information for Information Security activity - maintaining management reporting and Key Risk reporting
To develop, review, and coordinate Information Security Awareness training, to ensure staff have a good understanding of their obligations and expectations for information Security
To track and respond to Information Security queries and activity arising from audits (internal and external) and from Bank Head Office.
To participate in Information Security related elements of annual Vendor risk assessments
To develop information security guidance for business and technical functions including agreeing information security control objectives with Branch stakeholders (Business and IT)
To assist in monitoring and response to Information Security alerts arising from IT security tools and logs
j) To assist in Incident response and in Incident simulation exercises
k) To assist in carrying out Information Security Roles and duties as defined in Bank procedures and policies (A4, A7-A, A7-B, Section 27, Section 61)
l) To undertake professional development and update knowledge in industry expected practice for Information Security to ensure personal skills and knowledge of information security are appropriate for the job holder’s duties and responsibilities
Other
j) To support the SMF24 (IT and InfoSec)
k) To carry out such other duties as requested by the Head of Information Security or the General Manager.
The organisation AND EXPERIENCE
Knowledge and experience of information Security Management System (ISMS) maintenance in conformance with a recognised framework such as ISO27001, NIST or SOC2.
Preferably with a recognised certification in a governance and management-oriented discipline of Information Security (CISSP, CISM or similar).
Other the organisation related to governance assessment and reporting (such as CISA).
2+ years experience in Information Security, conducting information security reviews and guiding business and technical management in prioritising security improvement for technical and procedural Information Security measures.
Strong documentation and reporting skills.
Technical experience and knowledge of Cyber Security (up to date).
(Desirable) experience working with Security Information and Event Management (SIEM) and Vulnerability Assessment.
(Desirable) Knowledge of attack methodologies and system hardening principles including aspects of vulnerability scanning and detection and security testing.
(Desirable) experience working with MS Sentinel (SIEM), Darktrace (NDR), Carbon Black (EDR) and Qualys (VM)
the organisation is an employment business and employment agency and welcomes applications from all candidates