IT Security Analyst

IT Security Analyst

A leading law firm who is a one-stop shop for expert legal advice, with 5 offices spanning the north of England are continuing with their rapid growth and are now looking for an Information security analyst to aid in their Spalding and Nottingham locations.

The role of the Information Security Analyst is to ensure the confidentiality, availability, and integrity of information systems and data. Acting as the focal point for the coordination of policy, procedure, monitoring, the effective use of controls, audit,testing, incident management and user education. Maintaining awareness of current and emerging risks and provision of advice in terms of relevant controls and security standards. Working closely with in house IT, managed service providers and the businessto ensure the effective operation of security the Information Security Management System without unduly impacting the efficiency of the business.

Responsibilities Include:

- Carrying out regular system health check and maintain records of security incidents ensuring any required fixes / investigations / preventative measures are completed to maintain a high-security standard
- Implementation and ongoing management of appropriate security controls to protect information systems and data.
- Patch management to ensure patches are deployed in a timely manner while understanding business impact.
- Working with the managed service providers to undertake regular vulnerability testing. Reviewing findings and act as necessary.
- Undertaking internal audits as part of ISO27001 to evaluate the effectiveness of existing controls and make recommendation for improvement.
- Conducting risk assessments on a scheduled basis and as directed by QCC / Management Board, including any associated controls and their effectiveness
- Maintaining current awareness in relation to information security trends and security standards, making recommendation as appropriate.
- Advising on appropriate information security training for end users to help maintain ongoing awareness of risks and preventative measures.

Skills and experience required:

- Comprehensive understanding and technical knowledge of mainstream operating systems and security technologies.
- Strong knowledge of information security principles, systems of governance and best practises including ISO27001, Cyber Essentials Plus, PCI DSS, GDPR
- Working experience (configuration & administration) of VLANs, VPN, Mimecast, Tessian, Microsoft security solutions would be beneficial
- Relevant applicable qualifications would be beneficial
- Excellent written and verbal communication skills, able to work independently and as part of a team. Organised, structured with excellent attention to detail. Resilient and self-motivated. with a positive attitude

For a confidential discussion about this or other roles we are handling please get in touch with Harrison Wright

Jameson Legal acts as an employment business for temporary recruitment and as an employment agency for fixed term contract and permanent recruitment.