Senior Information Security Analyst

Onyx-Conseil • TRAFFIC • Remote (London, Not Specified, United Kingdom) • 3d ago

Job Description

Senior Information Security Analyst

Our Client is a leading global company specialising in pharma products.

They are looking to recruit a Senior Information Security Analyst with at least 5 to 7 years expertise in Technology Security.

The Senior Information Security Analyst is responsible for maintaining information security policies, architecture, technical standards, technical controls, security solutions, guidelines, procedures, and other elements necessary to maintain security posture.

Responsible for assessing information risk and facilitating remediation of identified vulnerabilities & risks across the organization. Accountable for coordinating the execution of security measures to protect our computer infrastructure, information systems and to ensure the organization maintains an acceptable risk posture.

The Senior Information Security Analyst is highly engaged in risk management and mitigation, including evaluating vendor risk, examining vendor contracts for terms of service, understanding third-party risk, and data privacy issues.

The analyst serves as an expert on cybersecurity protection, detection, response, and recovery.

This individual is responsible for coordinating penetration testing and managing internal and external cybersecurity analysts to detect, mitigate, and analyze threats. Works closely with other teams to develop controls such as firewalls, business systems, data leakage protection systems, patching, encryption, vulnerability scanning, application code scanning, remediation as well as defining configuration for a variety of security tools. Prior experience in an international enterprise environment is essential.

Responsibilities:
• Collaborate with IT teams for input and operational requirements to design and implement the companys overall cybersecurity strategy.
• Identify and address security gaps discovered through ongoing monitoring of all information security controls and implement enhancements to security controls.
• Manage access to elevated privileges accounts and audit activities to meet business and regulatory requirements.
• Evaluate and/or implement cybersecurity solutions and controls to maintain confidentiality, integrity, and availability.
• Actively participate in proofs-of-concept for new security technologies by developing selection criteria to identify appropriate security solutions to support strategic, operational needs, and security requirements.
• Participate in the development and testing of the security incident response plan, act as the incident response leader.
• Develop security, risk, and compliance reports and alerts.
• Participate in the yearly review of policies and procedures to support information security, risk, and security compliance activities.
• Participates in developing, testing, and implementation of disaster recovery procedures for the cybersecurity technology in place.
• Manages cybersecurity projects to ensure that the delivery is on-time, within budget, and adopted to meet the companys information protection requirements.
• Performs or coordinates internal security assessments, penetration tests, vulnerability scans, and assess organization cybersecurity maturity Complying with frameworks and regulations such as COBIT, NIST (800-53, cybersecurity), ISO, ITIL, PCI, GLBA, GDPR, HIPAA, and other data privacy and security standards and regulations.
• Provides internal customer support via assigned tickets for security-related issues, while ensuring assignments are resolved within assigned SLAs.
• Evaluate and implement CIS critical security controls where necessary.
• Will provide input into cybersecurity strategic roadmap and annual budget.
• Adhere to applicable change management policy and procedure.

Qualifications:
• Bachelors degree required; advanced degree highly desirable. Candidates must possess significant analytical skills, which evolved from early academic training in Cybersecurity, Information Systems, Computer Science, or similar discipline.
• Provides a documented work history that includes a minimum of 5-years experience in Information Security.
• Proficiency in security framework models such as NIST, etc., implementing and auditing security measures, security response, and incident management.
• Possess a working knowledge of Cisco network switches, routers, firewalls and VPN, network security, administration of DLP, antivirusantimalware, IDS/IPS, SIEM, SMTP, Email security, AD, Group Policy, DNS, DHCP, and VLANs.
• Experience with identity access management solutions, such as SAMLOATH
• Experience with HIDS and NIDS
• The ideal candidate possesses relevant information security or cybersecurity certifications.
• Requires the ability to analyze and recommend changes to the security landscape where necessary to meet the information security objectives of the organization.
• Participates in change management meetings and provides expert input to ensure security is maintained.
• Knowledgeable in security best practices such as encryption, hashing, vulnerability scans, event log monitoring, intrusion detection and prevention, eDiscovery, and content filtering.
• Ability to manage and continuously improve upon vulnerability management program.
• Ability to propose solutions for closing identified vulnerabilities in the infrastructure.

Desired Qualifications:
• Certified Information System Security Professional (CISSP), NIST Cybersecurity Framework (NCSF), Certified Cloud Security Professional (CCSP) andor Certified Ethical Hacker (CEH)
• Knowledge and experience with Microsoft Office and Visio.
• Knowledge of WAN technologies including MPLS, SD WAN.
• Knowledge of cloud providers security (AWS, GCP or Azure).
• Prior experience managing Cisco ELA products including DNA, Firepower, ISE Management console, Umbrella, Cisco AMP for endpoints, Stealth watch, as well as Splunk, SolarWinds, Varonis and Darktrace.
• Prior experience with Azure Rights management and Information protection highly desirable.
• Project management skills are highly desirable.
• Previous experience in a HIPAA/FDA regulated environment.

Competencies:

To perform the job successfully, an individual should demonstrate the following behaviors:
• Motivation/Initiative: Motivated and curious, willing to ask questions, research issues, and take on challenging projects/assignments; creative, brings new ideas to the table, exhibits self-confidence. Position requires a strong achievement motivation and tenacity.
• Administrative Skills: Possesses the ability to organize and follow-through on multiple tasks recognizes and attends to important details with accuracy and efficiency. Works to complete goals, tasks, and plans, anticipate potential problems and analyze alternative solutions.
• Interpersonal Style: (Interpersonal Skills, Communication, Teamwork); develops/ maintains effective working relationships; listens attentively to others; communicates ideas clearly (written & verbal); relates to people in an open/ sincere manner; participates effectively in meetings; assists in finding solutions as well as identifying problems; communicates appropriately with supervisor, and co-workers. Able to influence other individuals and maintain calm and reliable demeanor in the face of challenges.
• Self-Management: (Adaptability/Flexibility, Stress Tolerance, Autonomy); adapts readily to changes in routine; works effectively in stressful situations; needs limited guidance and direction; is comfortable working in a fast-paced environment; is reliable and dependable; is results-oriented; maintains productivity and composure under pressure; views problems as opportunities to create solutions.
• Thinking Skills: Diagnoses problems efficiently; gathers sufficient input before making decisions or plans; makes timely decisions, quickly determines sources of the problem, identifies information needed to solve a problem and analyzes alternative solutions, communicates issues and decisions effectively to the team.
• Customer Orientation: Sensitive & responsive to internal customer needs; demonstrates skills in customer services and satisfaction; maintains a positive attitude, willing to listen to customer problems and seeks solutions; stays in tune with changing needs of customers.
• The analyst will adapt readily to change, work effectively in stressful situations, need limited guidance and direction, and is comfortable working in a fast-paced environment.
• Diagnoses problems efficiently gather sufficient input before making changes, quickly determines sources of issues, identifies information needed to solve the problems, and analyzes and communicates issues with effective alternative solutions to the team.

This a UK based role at the Central London offices of the Client, although for the foreseeable future you will be based at home and work remotely.

The salary for this role will be in the range £70K - £85K.

Please do send your CV to us in Word format along with your salary and availability.

Related Jobs

Senior Security Engineer

Circle Recruitment • TRAFFIC • Remote (London, Not Specified, United Kingdom) • £550 - £650 / * • 4d ago

Fully Remote Umbrella

Role: Senior Security Engineer Salary/Rate: £550-650 per day inside IR35 Location: Hybrid London or Fully RemoteContract Duration: until Dec' 2025 We are currently looking for a Senior Security Engineer for our governmen...

4d ago

Apply

IT Risk & Controls Assurance Manager (Business Readiness)

Alexander Mann Solutions • ATS • Remote (London, Not Specified, United Kingdom) • 5d ago

Fully Remote Umbrella

Tesco Bank prides itself on their range of simple and convenient retail banking and insurance products designed specifically to meet the needs of Tesco customers. They believe that every little help makes a big differenc...

5d ago

Apply

Interim PR Manager

Sanderson Recruitment • TRAFFIC • Remote (London, Not Specified, United Kingdom) • £350 - £400 / * • 1w ago

Fully Remote Umbrella

Corporate Communications Manager £350 - £400 a day pay to umbrella 8 to 10 week day rate contract starting in mid-October Can be fully remote - travel once or twice a month to London The Role: We're working with a househ...

1w ago

Apply

Influencer Campaign Manager

Adecco • TRAFFIC • Remote (London, Not Specified, United Kingdom) • 2w ago

Fully Remote Umbrella

Job Advertisement: Influencer Campaign Manager Location: Remote (London office once a month) Contract Length: 4 months Daily Rate: 300 via Umbrella Company Are you ready to take the reins of influencer marketing with a d...

2w ago

Apply

AD Architect

CBSbutler Holdings Limited trading as CBSbutler • TRAFFIC • Remote (London, Not Specified, United Kingdom) • £500 - £525 / * • 18h ago

Fully Remote

AD Architect + Fully Remote working +Outside IR35 +6 months + + 500 - 525 a day Active Directory SME You will join a world leading consulting firm. You will be an Active Directory expert with demonstrable Active Director...

18h ago

Apply

Technical Operations Analyst

TEKsystems • TRAFFIC • Remote (London, Not Specified, United Kingdom) • 18h ago

Fully Remote

Job Title: Technical Operations Analyst - Fully Remote (MUST BE BASED IN THE UK) - No Sponsorship Available Job Description The Technical Operations Analyst is responsible for providing extensive technical support and ow...

18h ago

Apply

Software Developer

VIQU IT Recruitment • TRAFFIC • Remote (London, Not Specified, United Kingdom) • £400 - £500 / * • 19h ago

Fully Remote

Full-Stack Developer - Contract - Fully Remote - Outside of IR35 My Customer who are investing in their technology platform to enhance customer, supplier, and operational workflows is looking for an experienced Full-Stac...

19h ago

Apply

Staff Back End Engineer - Credit Cards Full Product Team

iwoca • TRAFFIC • Remote (London, Not Specified, United Kingdom) • 20h ago

Fully Remote

Staff Back End Engineer - Credit Cards Full Product Team Hybrid in London / Remote within the UK The company Imagine a world where every small business has the power to thrive. That's the world we're building at iwoca. S...

20h ago

Apply

D365 CE ARCHITECT/LEAD - CUSTOMER INSIGHTS JOURNEYS - OUTSIDE IR35 - 100% REMOTE

Opus Recruitment Solutions • TRAFFIC • Remote (London, Not Specified, United Kingdom) • £500 - £650 / * • 22h ago

Fully Remote

D365 CE ARCHITECT/LEAD - CUSTOMER INSIGHTS JOURNEYS - OUTSIDE IR35 - DAY RATE NEGOTIABLE - 100% REMOTE Role Purpose As a D365 CE Lead, you will be responsible for designing and delivering intelligent, data-driven custome...

22h ago

Apply

Cyber Security Governance And Assurance Specialist

TEKsystems • TRAFFIC • Remote (London, Not Specified, United Kingdom) • 22h ago

Fully Remote

Job Title: Cyber Security Governance and Assurance Specialist - Fully Remote (MUST BE BASED IN THE UK) - No Sponsorship Available Job Description The Cyber Security Governance and Assurance Specialist will be instrumenta...

22h ago

Apply