IT & Security Analyst

We’re looking for an IT & Security Analyst to join our IT team on a 12-month fixed-term contract. This role takes responsibility for assisting with the delivery of security-related IT services for Health Shield, both internally and externally facing. The role requires a working knowledge of security capabilities across a wide range of platforms and services, including network devices, antivirus, spam and filtering management, SIEM and other systems.

What you’ll be doing:

This role takes responsibility for assisting with the delivery of security-related IT services for Health Shield, both internally and externally facing. The role requires a working knowledge of security capabilities across a wide range of platforms and services, including network devices, antivirus, spam and filtering management, SIEM and other systems.

One of the key responsibilities of the role is the for review and response to incoming and outgoing security questionnaires provided by suppliers, brokers and customers.

The role will require a person who can:

• Take ownership for answering security questionnaires on behalf of the business where we are bidding for the provision of health cash plan services with our brokers and customers.
• Be an escalation point for Service Desk tickets at Level 2 and beyond, and be willing to step into Service Desk operation during times of absence.
• Assist with audit activities with external auditors and the closure of reports.

Main Responsibilities:

IT & Security Operations:

• Keep up to date with the latest and emerging security threats and technology advancements
• Actively monitor systems and services for threats and attacks.
• Identify weaknesses and areas of exploitation and activities to close or mitigate them.
• Work with colleagues to maintain Disaster Recovery and BCP plans.
• Develop IT Security policy documents and input into other policies where IT security is required
• Management and review of security standards and identification of optimisations.
• Quality control and assurance of security services, ensuring they meet required standards.
• Understanding of impact analysis and ensuring it is fit-for-purpose for allocation against security project activities and change reviews.

Working Relationships:

• Working with compliance, regulatory, audit and governance teams to maintain IT security.
• Prepare materials for stakeholders to manage security risks and issues and products and ensure they are well informed on all security matters.
• Engage with external security authorities and bodies to ensure Health Shield’s security capabilities are up-to-specification and able to respond to new and emerging risks and threats.
• Work with external partners and own all queries related to security questionnaires
• Both develop and contribute to business cases as required.

Third-Party Management:

• Work with 3rd-parties to ensure the security capabilities and services they supply are well managed and are appropriate for Health Shield.
• Work with external auditors for security services and reporting.

Continuous Improvement

• Be an active participant in effective, collaborative and dynamic team planning activities.
• Contribute to ensuring the team has the right working environment and tools needed.
• Actively participate in the IT team and assist in developing its capabilities and contribute to knowledge-sharing.
• Identify better ways of working, and better ways of using tools, reducing management tasks and ensuring continued focus on delivery and circulate these to the team for discussion and adoption.

We are seeking a keen and ambitious person who wants to join a well-established team delivering IT services to our people. The person should already have a good experience of IT security services in a best practices model and be able to demonstrate a wide range of security knowledge across the full IT landscape. We are looking for someone who is keen to expand their knowledge and learn new skills in what is a very diverse role

We are looking for someone who has a strong working knowledge of Cloud administration for tools such as M365, Azure, AWS etc. Expertise and experience of JIRA administration would be very advantageous.

Knowledge of working with Risk and defining appropriate measures for managing them and of reporting and audit activities is valuable to ensure security services are delivered appropriately for the business.

The person should be experienced in challenging the status quo within an organisation in co-operative way and helping the team to evaluate their requirements for security capabilities to delivery appropriately scoped services.

Excellent customer-facing and interpersonal skills are extremely important, the ability to be a keen and fast learner is essential as is a willingness and to undertake and learn a wide variety of tasks. The person should be professional in their approach and adhere to robust organisational processes and must be detail and quality-oriented in their approach.

Essential:

• Experience with Atlassian toolsets - Confluence, Jira, Service Desk.
• Strong working knowledge of Cloud administration for tools such as M365, Azure, AWS etc.
• Experience working with technical teams.
• Ability to identify, document and escalate Risks, Assumptions, Issues and Dependencies and their importance.
• Understands quality and assurance standards and their managing workload to achieve them.
• Can apply commercial and cost management and its application and value.
• Able to take responsibility and ownership of activities with no supervision.
• Able to engage with 3rd-parties and their role in delivery and management.
• Excellent communication, organisational and task prioritisation skills.
• Analytical mind and problem-solving aptitude.

Desirable:

• Formal qualification in a security discipline or evidence of working towards one, e.g. CompTIA, etc.
• Expertise and experience of JIRA administration would be very advantageous.
• Expertise and experience of Atlassian administration is highly desirable
• Awareness of FCA and PRA security guidelines and requirements.
• Awareness of GDPR and data security and its application in businesses.
• Understanding of development projects and delivery.

Our people are at the heart of everything we do. We are committed to creating a supportive, inclusive workplace where you can develop your skills, make a meaningful impact and be part of a team that genuinely cares about helping our members lead healthier, happier lives. Alongside a competitive benefits package, you’ll enjoy flexible working opportunities, wellbeing support and a culture that encourages growth, collaboration and continuous improvement.

As part of our recruitment process, the successful candidate will be required to undergo and successfully satisfy a Basic Disclosure and Barring Service (DBS) check before employment can commence.

We are committed to creating an inclusive recruitment experience. If you require any reasonable adjustments at any stage of the recruitment process, please contact us and we will do our best to accommodate your needs.

Pay: £35,000.00-£42,000.00 per year

Benefits:

• Additional leave
• Bereavement leave
• Company events
• Company pension
• Cycle to work scheme
• Employee discount
• Employee mentoring programme
• Enhanced maternity leave
• Enhanced paternity leave
• Financial planning services
• Free flu jabs
• Free parking
• Health & wellbeing programme
• On-site gym
• On-site parking
• Paid volunteer time
• Referral programme
• Sick pay
• Work from home

Health Shield is a regulated Insurance provider and is one of the leading companies in the Health Cash Plan market. Our Cash Plan products allow our Customers (and their staff) to claim for routine medical expenses - dental treatment, glasses, physio and are increasingly being seen as a key employee benefit. Our purpose is to help people lead healthier, happier lives and our people are key in achieving this. Our people goal is to create an environment where they are empowered, motivated, strive for excellence and conduct themselves with integrity.