Information Security Analyst

We’re hiring an IT Security Officer to help identify, assess and close security gaps across the organisation.

You’ll work alongside the Information Security Officer and take hands-on responsibility for security monitoring, incident response, vulnerability management and technical risk.

This role requires previous experience within London Market insurance. This could include experience with an insurer, broker, managing agent or another organisation operating in the London Market.

What you’ll be responsible for

• Maintaining security controls and tools covering vulnerability scanning, endpoint security and network monitoring.
• Investigating security alerts and coordinating incident response through containment, remediation and recovery.
• Running vulnerability assessments, coordinating penetration tests and tracking findings through to closure.
• Assessing technical security risks, agreeing practical remediation plans and escalating serious risks.
• Working with control owners to implement security controls and gather evidence that they are operating effectively.
• Defining security requirements for projects, infrastructure changes and new technologies.

• Experience working in the London Market insurance sector.
• Hands-on experience in security operations, cyber defence or technical information security.
• Experience investigating security alerts or incidents and coordinating the response.
• Experience managing vulnerabilities from identification through to remediation.
• The ability to investigate technical issues and explain the resulting risk clearly to technical and non-technical stakeholders.
• The right to work in the UK without employer sponsorship.

Useful, but not essential

• Experience with Tenable or another vulnerability-scanning platform.
• Experience with endpoint security or network-monitoring tools.
• Experience coordinating penetration tests.
• Experience supporting audits, risk reviews or control-assurance work.

The role can be based in London or Birmingham. You’ll attend your chosen office two days per week and work remotely for the remainder.