Information Security Analyst job

1

Click here to load reader

Transcript of Information Security Analyst job

Page 1: Information Security Analyst job

Information Security Analyst

Our client is a leading organisation in the Media sector; they specialise in media play-out and provide access to broadcast content across all media, from television to mobile phones. They require an Information Security Analyst

to join the team. You will be reporting to the Head of Information Security.

THE ROLE - MAIN RESPONSIBILIITES Primary responsibilities include audit compliance against Information Security Policies and Standards; also assuring adherence to client security requirements. Ensuring projects are deployed with the appropriate security controls to protect the confidentiality, integrity and availability of data and that of its clients. The role holder is expected to have knowledge and experience of both information security principles and compliance auditing and will apply this expertise to support the security compliance of the business as a whole.

RESPONSIBILITIES INCLUDE

Conduct audits of internal business units to ensure compliance to both group standard and client security requirements.

Conduct security assessments of current and potential suppliers.

Conduct security risk/threat assessments of new projects to reduce risk to an acceptable level.

Maintain a risk register for each developed project.

Make security recommendations as part of a continuous improvement programme to assure the confidentiality, integrity and availability of data and that of its clients.

Proactively identify and assess potential likelihood and impact of risk to our client.

Analyse security incidents, real and potential, initiate and monitor effective incident resolution.

Maintain up-to-date knowledge of information security threats, technologies and best practices.

Investigate and recommend methods for vulnerability remediation.

Use penetration testing and vulnerability assessment tools, or coordinating the use of these tools by third parties or internal teams; oversee external penetration testing exercises.

Promote security awareness and best practices throughout the business.

Assist with Change Request approvals ensuring proposed changes meet information security policies and standards.

For further information please contact [email protected]