Lead Information Security Analyst

The Lead Security Analyst will join the GSC Security Team, helping to monitor, report, and manage security risks and ensure delivery of the solution or mitigating actions. The purpose of the role is to ensure Security is embedded in the culture of the businesses we support and ensure core security processes and standards are adhered to. The role includes working closely with our central security function to manage common and wider reaching security and compliance issues. You will also have a level of responsibility for system security processes required to achieve compliance with current business and ABF standards ensuring risks to security are identified, reviewed and resolved. You will also facilitate the delivery of application patching and reporting across a number of business units., As the Lead Information Security Analyst you will: ️ Help develop security roadmaps, risk assessments and mitigation plans. ️ Review security risks and access controls, providing regular stakeholder updates. ️ Maintain system security processes and compliance with business standards. ️ Coordinate application patching across the business. ️ Monitor vulnerabilities and work with system owners to implement appropriate controls. ️ Investigate security incidents and potential indicators of compromise referred by the SOC or other sources. ️ Work with central teams to strengthen the security of business applications. ️ Ensure security is embedded throughout project design and delivery. ️ Monitor and analyse security alerts received through tickets, phone calls and other channels. ️ Build strong relationships across IS and the wider business, providing security advice and support. ️ Improve security processes, controls and awareness across supported businesses. ️ Implement and maintain security standards and operating procedures. ️ Support the management and development of junior team members through work allocation, mentoring and performance support. ️ Contribute to OT security initiatives, including asset visibility, network segmentation, vulnerability management, resilience reviews, site assessments and project security requirements. The Right Person

️ Strong knowledge of information and cyber security, including risk, vulnerabilities, monitoring, incident response, and identity and access management. ️ Experience in an information or cyber security role covering governance, assurance and operational security. ️ Knowledge of security controls and technologies, including MFA, Privileged Access Management, endpoint security, vulnerability management, SOC monitoring and cloud security. ️ An understanding of Operational Technology security and cyber risk in manufacturing or operational environments. ️ Excellent written and verbal communication skills, with the confidence to engage stakeholders at all levels. ️ Strong analytical and problem-solving skills, including experience producing reports, risk assessments and process documentation. ️ The ability to manage multiple priorities, adapt to change and proactively resolve issues. ️ Experience mentoring colleagues and improving security awareness, processes and controls.

We believe in rewarding our employees and providing a supportive work environment. Here’s what you’ll get: Competitive Benefits Package including: Competitive Salary Generous Leave - 25 days holiday + bank holidays Free Onsite Parking Employee Assistance Programme Health Scheme Holiday Purchase Scheme Pension Scheme Onsite Shop Eyecare Vouchers Cycle to Work Scheme Loyal Service Awards Employee Referral Scheme Discounts on groceries, holidays and more.