siemrisk managementinformation securitygrcnistiso 27001vulnerability assessmentpenetration testingidentity and access management
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указана
На похожих ролях по рынку
$41к$57кмедиана$78к
27 в выборке
На СНГ рынке: $2.7к/мес ($2к - $3к)
70
Хорошая вакансия
развернуть
Понятная роль в security GRC в крупной финансовой компании даст полезный опыт работы с рисками и контролями, но шестимесячный контракт и отсутствие зарплаты затрудняют оценку долгосрочной привлекательности.
Кликните для подробной информации
Контракт на полгодаЗарплата не указанаПонятные задачиКрупный работодательГибкие условия
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Information Security Analyst (GRC): Strengthening information and cyber security across retirement, retail, and investment business areas with an accent on security controls, risk management, vulnerability assessment, and third-party assurance. Focus on translating ISO 27001 and NIST requirements into practical designs, evaluating security findings and suppliers, and supporting penetration testing.
Location: Hove, Brighton and Hove, United Kingdom
Company
Legal & General is a UK financial services group and global investor providing retirement, protection, pension, and insurance solutions.
What you will do
Interpret information security policies, standards, and control requirements, translating them into practical architecture patterns and solution designs.
Advise project managers, developers, technology teams, and business stakeholders on security controls and good practice.
Monitor current and emerging security risks, assess vulnerabilities from application and infrastructure scans, and recommend proportionate solutions.
Review technical findings, compensating controls, risk ratings, system configurations, and solution designs to identify and address security issues.
Evaluate third-party suppliers’ security maturity and support security due diligence, tender, and contract reviews.
Support penetration-test scoping and assess and document resulting findings.
Requirements
Understanding of information security principles and controls, including encryption, identity and access management, and security information and event management.
Experience in an IT, technology, information security, risk, or business-focused environment.
Strong analytical and judgement skills, with the ability to assess information and recommend practical solutions.
Clear written and verbal communication skills and confidence collaborating with a range of stakeholders.
Good organisational skills, including prioritising work, managing deadlines, and using time effectively.
An adaptable and creative approach, curiosity, and willingness to learn new technologies and solutions.
A relevant degree or equivalent practical experience in computer science, IT, business, or a related discipline.
Nice to have
Experience in report writing, producing metrics, risk management, or security engineering and design.
Culture & Benefits
Six-month fixed-term contract with a supportive, inclusive, and collaborative working environment.
Annual performance-related bonus plan and share schemes.
Pension contribution, life assurance, and a healthcare plan for permanent employees.
At least 25 days of holiday plus public holidays, increasing to 26 days after two years, with the option to buy and sell holiday.
Competitive family leave, electric car salary-sacrifice scheme for permanent employees, and discounts on company and external products.
Flexible working options, including part-time and job shares where business needs allow.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →