Senior Information Security Analyst - London, United Kingdom - Nigel Frank International

Nigel Frank International

Verified Company

London, United Kingdom

1 week ago

Posted by:

Tom O´Connor

beBee Recruiter

Description

My client has a small but growing internal security team covering operations, governance, and compliance.

The team covers a broad range of security, from incident investigation and response, through to security projects and advisory to the group board.

The role is partially L2/L3 analyst role, where 24/7 security event monitoring is outsourced and L1 is covered by the service desk.

The role will be working as an analyst with time split between project work which may include working on projects in a securityconsultant capacity or implementation of new security systems and an analyst role which will include managing and enhancing the group vulnerability platform, writing advisory notes and handling investigations and performing security design assessments.

Thereforethis role will provide the potential to grow and develop a wide understanding of multiple aspect of security. We provide access to Immersive labs, to help constant development of the skills.

Using your strong interpersonal skills to effectively communicate technical security issues across the business at all levels, you'll be proactive and keep up to date with current trends in an ever-changing industry.

Role & Responsibilities

Analysis and investigation of alerts arising from external team
Use Threat intelligence services to identify potential threats
Supporting the vulnerability programme
Advising projects and IT teams on security related policies and controls
Ensure appropriate and timely reporting and escalation of areas of noncompliance and poor security and be responsible for the daily operation and management of Security Technologies and Controls.
Two plus years' experience within an enterprise environment.
Exposure to enterprise Information Security standards including CIS Controls, NIST SP 80053, ISO 27001, 27002 etc. Data Protection Act and the General Data Protection Regulation, high level understanding in these are sufficient.
Familiarity with the Azure Security Stack
Good understanding of security testing principles, including experience of vulnerability scanning, identifying, resolving, and reporting risks.
Experience in security architecture

Skills & Qualifications