Information Security Analyst

Job Description

Information Security AnalystExeter - Fully Remote£40,000 - £45,000 + benefitsFantastic new permanent opportunity for an experienced Information Security Analyst with a good background within security governance, risk & compliance. My client is a market leading technology business based in Exeter who are expanding their informationsecurity team due continued growth.You will be part of the IT Infrastructure & Security team and be responsible for ensuring the companies security policies are kept up to date and produce regular audits to ensure policies are being followed, you will ensure security measures to protect computersystems, networks, and data from cyber-attacks are being followed and liaise with various teams to assist you with this. You will also be involved with producing and updating ISO27001 documentation and security questionnaires and will be the first point ofcontact for their parent company security team.Main responsibilities:

• Manage all aspects of software updates and patch management process.
• Take a lead role in any breach incident and manage to its conclusion.
• Train & inform company users on security best practices and current threats.
• Use the company security & vulnerability tools to produce risk audits and produce corrective action procedures for the relevant teams to follow.
• You will be involved in the design aspect of future products and infrastructure to ensure the security aspect is covered and any risks are identified and registered.
• Ensure all backup processes for network equipment and servers are robust and meet security framework requirements.
• Identify current and emerging technology issues including security trends, vulnerabilities and threats and produce recommendations on how to minimise risk.
• Be involved in regular audits of company equipment and software used and recommend improvements and upgrades.
• To implement, document and maintain IT policies, standards, and procedures to match current security frameworks such as ISO27001, GDPR etc.
• Implement, manage, and maintain the technical risk register which will feed into the overall company risk register.
• Assist with completing security questionnaires from Clients (GDPR, DPIA, Tenders etc) and help update & Maintain ISO27001 documentation.

Skills Required:

• Proven background within a similar GRC focussed Information Security Analyst position.
• Commercial acumen to provide cost-effective security solutions.
• Exposure to ISO27001 and GDPR frameworks.
• The post holder will have the ability to produce security documentation to an agreed standard.
• Be able to prioritise and manage their workload effectively, be analytical with an eye for detail.
• Be adaptable to stay up to date with the very latest updates about security threats and solutions.
• Be process orientated and have strong communication skills.
• This role will suit someone who is willing to work towards their CISSP certification.
• Ideally you will have a technical IT background to understand how security solutions can be implemented effectively across the business.

For any further queries regarding the role, please contact Danny Palmer at