IT Security Analyst

placeSouthampton calendar_month 
IT Security Analyst - GRC Focused
Permanent - £45k-£54k + strong benefits

Location: Hybrid – Southampton area

Your new company

I am looking to recruit a skilled IT Security Analyst to join a global leader in the trade/logistics space based in the heart of Southampton. You’ll be working for a business that expedites and simplifies the import/export process through innovative technology solutions.

Due to multiple recent acquisitions, the environment is ripe for integrations and digital transformation. This role will be hybrid, likely to be 3 days in the office a week, in Southampton, so you will need to be based within a commutable distance.

Your new role

This is an IT Security Analyst role that focusses more on the GRC and policies/procedures rather than being a SOC/Technical Security Analyst role. The client is looking for someone who is experienced with ISO27001 and someone who can own documentation and support the ISMS. It is likely that the role will grow and develop in the future. In the clients’ words, key elements of the role include:

  • ISMS Operation and Improvement: Support ISO27001 compliant ISMS.
  • Policy Development: Create and maintain IT compliance policies and guidelines.
  • Risk Management: Identify, assess, and mitigate IT risks; work with asset owners on remediation.
  • Control Management: Support security controls like identity management, encryption, and network security.
  • Asset Management: Monitor and manage assets, software, and licencing.
  • Auditing & Monitoring: Lead IT audits, address findings, and participate in internal/external audits.
  • Security Technologies: Oversee cyber security tools and ensure effective responses to alerts.
  • Operational Security: Review security logs and alerts, identify issues, and implement remediations.
  • Incident Response: Respond to IT compliance and security incidents, document actions, and learn from them.
What you'll need to succeed
  • GRC skills and strong communication skills
  • Strong understanding of risks associated with bad security processes.
  • Experience working with an ISO 27001 ISMS.
  • A solid understanding of the cyber security risks associated with various technologies and how to apply appropriate controls to mitigate these.
  • Experience in risk assessment and management in the context of information security.
  • CompTIA Security+ and ISO27001 certificates would be advantageous.

What you'll get in return

As well as a salary of up to £54000, there is also a company bonus scheme of up to 10%, BUPA healthcare, 25-28 holiday days + bank holidays, flexible working hours, free parking, 4x life assurance and company health cash plan. On top of this, they will fund courses/qualifications to improve your skill set, and you’ll get access to their flexible benefits platform to select other benefits that suit your circumstances.

What you need to do now

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV.

If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career.

#LI-DNI

#4674580 - Daryl Angel

apartmentBAE SystemsplaceFrimley, 40 mi from Southampton
on skills and experience What you'll be doing:  •  Lead on developing risk assessment and analysis methodologies; developing leading approaches to assessing technology such as AI, traditional IT systems and cyber risk in the supply chain  •  Conduct...
apartmentDeloitte LLPplaceWinchester, 10 mi from Southampton
and other compliance risk exposures. This position plays a crucial role in ensuring quality, data protection and security matters related to our innovative audit products and solutions, environments, and frameworks, throughout the software development...
apartmentHolt RecruitmentplaceChichester, 31 mi from Southampton
Prepare and publish RFIs and RFQs, providing detailed cost-benefit analysis and ROI proposals.  •  Manage the process of engagement, disengagement, and change management throughout the contract lifecycle.  •  Conduct regular site visits and business reviews...