Information Security Analyst (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Information Security Analyst (Cybersecurity): Ensuring compliance with security frameworks and managing internal audits with an accent on ISO 27001, GDPR, and DORA. Focus on executing internal audits, monitoring security incidents via SIEM, and remediating control deficiencies.
Location: Hybrid in Southampton, United Kingdom (2 days office, 3 days remote)
Company
is a global software leader providing AI-powered solutions for customer experience, financial crime prevention, and public safety.
What you will do
- Execute internal audits to evaluate IT controls and risk management processes.
- Facilitate gap assessments and audit readiness for ISO 27001, GDPR, and DORA.
- Develop and maintain compliance documentation, control narratives, and walkthroughs.
- Coordinate with external audit teams to streamline processes and provide requested evidence.
- Perform security monitoring and incident detection using SIEM tools like Rapid7 InsightIDR.
- Collaborate with IT and Security Operations teams on vulnerability tracking and remediation.
Requirements
- Strong expertise in ISO 27001, ISO 27701, ISO 42001, GDPR, DORA, and Cyber Essentials.
- Experience with SIEM solutions, specifically Rapid7 InsightIDR.
- Hands-on experience conducting internal and external audits and compliance assessments.
- Fundamental understanding of incident response frameworks and cybersecurity best practices.
- Must be based in the UK to adhere to the hybrid office model in Southampton.
hirify.global-to-have"> to have
- Master’s degree in Cybersecurity, Risk Management, or related fields.
- Certifications such as CISA, CISM, CISSP, or ISO 27001 Lead Auditor.
- GIAC certifications (e.g., GCIH or GSEC).
Culture & Benefits
- -FLEX hybrid model allowing 3 days of remote work per week.
- Fast-paced, collaborative, and creative environment within a global market leader.
- Extensive internal career growth opportunities across multiple roles and domains.
- Work with high-standard teams serving a significant portion of the Fortune 100.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →