Назад
Company hidden
4 дня назад

Information Security Analyst (GRC)

Формат работы
onsite
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
UK
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Information Security Analyst (GRC): Strengthening information and cyber security across retirement, retail, and investment business areas with an accent on security controls, risk management, vulnerability assessment, and third-party assurance. Focus on translating ISO 27001 and NIST requirements into practical designs, evaluating security findings and suppliers, and supporting penetration testing.

Location: Hove, Brighton and Hove, United Kingdom

Company

Legal & General is a UK financial services group and global investor providing retirement, protection, pension, and insurance solutions.

What you will do

  • Interpret information security policies, standards, and control requirements, translating them into practical architecture patterns and solution designs.
  • Advise project managers, developers, technology teams, and business stakeholders on security controls and good practice.
  • Monitor current and emerging security risks, assess vulnerabilities from application and infrastructure scans, and recommend proportionate solutions.
  • Review technical findings, compensating controls, risk ratings, system configurations, and solution designs to identify and address security issues.
  • Evaluate third-party suppliers’ security maturity and support security due diligence, tender, and contract reviews.
  • Support penetration-test scoping and assess and document resulting findings.

Requirements

  • Understanding of information security principles and controls, including encryption, identity and access management, and security information and event management.
  • Experience in an IT, technology, information security, risk, or business-focused environment.
  • Strong analytical and judgement skills, with the ability to assess information and recommend practical solutions.
  • Clear written and verbal communication skills and confidence collaborating with a range of stakeholders.
  • Good organisational skills, including prioritising work, managing deadlines, and using time effectively.
  • An adaptable and creative approach, curiosity, and willingness to learn new technologies and solutions.
  • A relevant degree or equivalent practical experience in computer science, IT, business, or a related discipline.

Nice to have

  • Experience in report writing, producing metrics, risk management, or security engineering and design.

Culture & Benefits

  • Six-month fixed-term contract with a supportive, inclusive, and collaborative working environment.
  • Annual performance-related bonus plan and share schemes.
  • Pension contribution, life assurance, and a healthcare plan for permanent employees.
  • At least 25 days of holiday plus public holidays, increasing to 26 days after two years, with the option to buy and sell holiday.
  • Competitive family leave, electric car salary-sacrifice scheme for permanent employees, and discounts on company and external products.
  • Flexible working options, including part-time and job shares where business needs allow.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →