Information Security Analyst

Sanderson ,
Manchester, Greater Manchester
Job Type: Full-time
Salary: £50,000 per annum

Overview

Information Security Analyst Manchester £50,000 - £60,000 benefits Fantastic new opportunity for an experienced Information Security Analyst with this market leading financial services business based in Manchester. You will be joining the growing UK Information Security Team which covers the full breadth of information security disciplines, including privacy. The team already has excellent relationships with their stakeholders, including system owners, senior management and IT teams in the UK and abroad. To help these stakeholders provide excellent support to their branches and customers they are looking for an additional team member who is passionate about building innovative and pragmatic solutions and who would value their open collaboration with stakeholders. Main responsibilities: Lead risk & control assessments using defined processes, for example external supplier due diligence, privacy impact assessments and project security. Represent Information Security with Business stakeholders as a trusted advisor, finding pragmatic and cost-effective security solutions that efficiently support customer needs. Act as a specialist owner of 1 or more of the team's security processes, systems or frameworks, maintaining specialist knowledge and continually evolving the process, system or framework with reference to the local system & process owners, regulation & good practice. Provide appropriate specialist advice and interpretation of Information Security best practice and UK regulatory requirements to a range of different stakeholders as new products, processes and systems are developed. Lead assurance activities to assess the effective implementation and operation of systems and controls to manage the information security risks. Respond to queries from their branches and other colleagues on information security to ensure effective risk management of information security. Act as lead Duty Incident Manager on a shared rota basis to manage information security and personal data breaches in accordance with defined incident management processes, ensuring impacts and risks are appropriately identified, assessed and mitigated. Deputise for elements of the reporting manager's role, on an ad-hoc basis, to cover absences, periods of increased workload, etc. Skills Required: Proven experience of working within a similar GRC focussed Information Security Analyst position. Solid, practical and demonstrable experience of information security (technical and non-technical aspects), including a good understanding of privacy. Ability to plan, organise and prioritise tasks and projects effectively. Pragmatic, and effectively balances risk and control requirements with commercial drivers. Ability to solve problems creatively and effectively. Positive, collaborative and builds and maintains effective relationship with others . Able to influence decision making to surface and mitigate issues and risks across a wide range of stakeholders. Any experience with payments solutions such as BACS, Faster Payments , CHAPS from an information security perspective (desirable). Any experience auditing 3rd party suppliers (desirable). For any further queries regarding the role, please contact Danny Palmer on or at