Information Security Analyst (6 month FTC)

Description

The company is a UK financial services group and one of the world's largest asset managers, offering retirement and protection products. It has served customers since 1836.

The role is an Information Security GRC Analyst who will help improve how the Retirement, Retail and Investment business areas handle information and cyber security. You will work with technology teams and business stakeholders to manage security risks and controls, using frameworks such as ISO 27001 and NIST.

The team values analytical thinking, practical problem solving and an inclusive working environment. You do not need to meet every requirement. If you have transferable skills and want to build a career in information security, the company would like to hear from you.

Institutional Retirement serves around 700,000 institutional customers and is the UK's longest-running insurer, operating there continuously since 1987. Across retail and institutional retirement, the company supports more than 1 million customers. Its UK retirement annuity book was an estimated £86.1 billion at 31 December 2023.

Responsibilities

• Turn security policies, standards and control requirements into practical architecture patterns and solution designs.
• Advise project managers, developers and other stakeholders on security controls and good practice.
• Track current and emerging security risks and recommend proportionate responses.
• Help assess vulnerabilities found by application and infrastructure security scans.
• Work with technical teams to review findings, compensating controls and risk ratings.
• Assess third-party suppliers' security maturity and support due diligence, tender and contract reviews.
• Review system and solution configurations, spot security issues and suggest improvements.
• Help scope penetration tests, then assess and document their findings.

Requirements

• Understanding of information security principles and controls, including encryption, identity and access management, and security information and event management.
• Experience in an IT, technology, information security, risk or business environment.
• Strong analytical skills and sound judgement, with the ability to assess information and propose practical solutions.
• Clear written and verbal communication, and confidence working with a range of stakeholders.
• Good organisation, including the ability to prioritise work, manage deadlines and use time well.
• Curiosity, an adaptable and creative approach, and a willingness to learn new technologies and solutions.
• A relevant degree or equivalent practical experience in computer science, IT, business or a related discipline.
• Beneficial: experience in report writing, producing metrics, risk management, or security engineering and design.

Conditions

This is a 6 month fixed-term contract.

Flexible working is open for discussion, including part-time and job shares. Some roles have limited flexibility due to customer demand, but requests are accommodated where possible.

Offices are being built across the UK to reach net-zero carbon by 2030, designed to support in-person collaboration.

Equal opportunities apply, and candidates who do not match every criterion are still encouraged to apply.

Benefits

• Annual performance-related bonus plan and share schemes.
• Generous pension contribution.
• Life assurance.
• Healthcare plan for permanent employees only.
• At least 25 days' holiday plus public holidays, rising to 26 days after 2 years' service, with the option to buy and sell holiday.
• Competitive family leave.
• Salary sacrifice electric car scheme for permanent employees only, offering a tax-efficient way to lease a new electric car.
• Discounts on the company's own products and at many high street and online retailers.