Information Security Analyst

We are on the search for Information Security Analysts to join our Security team in Northampton. 

Leading Cyber Security and Data Protection training and awareness programmes you will support compliance with GDPR and internal policies and work with IS teams to ensure alignment with best practices in technical designs. Key responsibilities include managing PCI DSS certification for all relevant payment gateways, leading incident investigations, conducting risk and vulnerability assessments, and testing internal cyber controls with evidence reporting to stakeholders

This is a permanent position based at our office in Brackmills Business Park, Northamptonshire. Working onsite 4 days per week with 1 day from home.

What will I be doing as Information Security Analyst?

• Assist in establishing and monitoring the corporate information security policy, standards, procedures, guidelines, internal controls and business continuity to ensure Howdens Business Information is protected, in alignment to Cyber Security best practice and data protection regulation.
• Provide technical project support representing information security
• Lead with incident management investigations and conduct risk and vulnerability assessments where appropriate
• Play an active role in incident management activities.
• Support the PMO (Project Management Office) to ensure appropriate security is assessed within projects alongside overseeing supplier compliance to Howdens needs for Cyber Security
• Conduct risk and vulnerability assessments to identify and mitigate security risks
• Engage with IT projects to perform Security Reviews and ensure findings are appropriately communicated and added to the appropriate logs to be managed
• Engage with external organisations working with Howdens to ensure the Confidentiality, Integrity and Availability of Howdens information is maintained

What we need from you

• Either Technical Operations Security experience with an interest to work within a governance role or experience working in a Security Governance role
• Ability to assess system controls based on a documented standard
• Will be able to demonstrate ability in problem analysis and resolution
• Strong communication skills to be able to influence best practice at all levels of the organisation, with the ability to explain technical problems to non-technical business stakeholders at all levels
• Ability to build effective relationships to influence and negotiate business outcomes
• Experience of working with and presenting findings to Senior Stakeholders
• Skilled in presentation and training techniques in matters of IT security is advantageous
• Ideally you will hold or be working towards a recognised Cyber Security qualification (CISA, CISMP, ISO27001 lead implementor or equivalent).
• Ability to work onsite in Northampton a minimum of 4 days per week.

What we can offer you:

• Grade 5
• Competitive salary and annual company bonus
• Excellent pension scheme (company contribution of up to 12%)
• 25 days holiday + bank holidays with the option to buy additional days
• Staff Discount
• Employee Assistance Programme
• Exceptional Reward and Recognition events

How to apply

Good luck with your application.  Before you apply, please speak to your manager, so that they are aware of your interest in this role.  You will also need to attach a CV and Cover Letter as part of your application.  Please take note that this advert is a summary of the main duties and responsibilities and may be subject to change.  If you have any questions or need further support or information, please contact the Hiring Manager Adam Reid, or Holly Gibbins, Recruitment Advisor.