Information Security Analyst

In this role, you’ll develop and maintain a robust Information Security Management System (ISMS), carry out regular risk assessments and contribute to the continuous development of security tools, technologies and processes, making a direct difference in the company’s cyber resilience., * Develop and maintain a comprehensive Information Security Management System (ISMS)

• Conduct regular risk assessments to identify and mitigate potential security threats
• Establish and manage a security incident response plan, documenting incidents and protocols
• Perform PCI Compliance auditing and ensure adherence to GDPR and the Data Protection Act 2018
• Collaborate with security partners and stakeholders to maintain a robust security posture
• Continuously monitor security systems, investigate alerts, and take appropriate actions
• Support penetration testing and remediation processes to address vulnerabilities
• Deliver cyber awareness training and phishing tests, supporting staff with best practice

• Proven experience in information or cyber security, or a related IT role
• Strong understanding of Information Security standards and frameworks
• Proficiency in security software and intrusion detection/prevention systems
• Experience managing incident response plans and investigating threats using forensic analysis tools
• Strong analytical, problem-solving, and multitasking skills
• Excellent communication skills to translate technical issues into business language
• Degree in Information Security, Computer Science, or a related field (desirable)
• Cyber security certifications such as CISSP, CISM, CASP/Security+ (desirable)