IT Security Analyst
- Bristol Area
- Permanent
- Full-time
Due to the location of our site, you will need to drive to get to and from.As IT Security Analyst you will work as part of a growing team, responsible for the Culina Group's IT Security you will play a key role in improving our security policies, procedures and technologies.This is a full time, permanent position working Monday to Friday 9am to 5pm offering a competitive salary and package with the opportunity to work for a forward thinking market leader.Job responsibilities of IT Security Analyst include:
- Manage our user security awareness platform and conduct regular dummy phishing campaigns.
- Develop and issue security advisory guidance to raise end user security awareness.
- Develop and maintain a wide range of security policies, procedures and standards.
- Maintain IT risk registers for each of our businesses, including tracking remediation activities.
- Produce monthly security dashboards to be shared with senior management in each business.
- Perform security audits of processes and technologies to ensure compliance with standards and risks are managed.
- Develop effective working relationships with key stakeholders including the Security team, our SecOps (Security Operations) team, our outsourced SOC/SIEM provider and other colleagues across the IT department.
- Represent the Security team on projects and other new developments to ensure security is 'designed in' at the earliest stages.
- Regularly monitor the IT Security shared mailbox, addressing queries/requests where possible and escalating to other team members where appropriate.
- Investigate alerts issued by the SOC and escalate where appropriate.
- Review and address tickets assigned by the IT Service Desk to the Security team, escalating where appropriate.
- Coordinate the work of selected third parties (eg pen testers) to ensure they deliver requirements on time and to an acceptable standard.
- Provide incident response support / investigation, including mitigating actions to contain activity and facilitating forensics analysis when necessary.
- Assist with ensuring compliance across the business with the General Data Protection Regulation, Data Protection Act and Computer Misuse Act.
- A demonstrable desire to progress within the IT Security profession.
- Excellent verbal and written communication skills.
- Ideally 1-2 years experience in an IT, IT audit or Security role. If you don't have this experience but have relevant educational qualifications in the IT security/risk arena then please still apply.
- Hold, be working towards or prepared to gain an entry level Security certification (eg Comptia, ISO27000, CISMP etc).
- Possess some technical IT skills but with an eagerness to acquire new skills.
- Flexible and adaptable approach to work in order to meet the requirements of the business.
- An ability to develop effective working relationships with technical and non-technical colleagues.
- Annual Leave - 25 days plus 8 Bank holidays
- Company Bonus - We do our best work to succeed together. When we achieve our goals you'll be rewarded through our bonus scheme
- Private Medical Cover- This gives you peace of mind, you have choice, flexibility and speed of access to the most clinically appropriate care via Bupa
- Pension scheme - we want colleagues to enjoy a comfortable retirements so we offer a great contribution
- Life Assurance - x4 your annual salary Wellness - Via our Employee Assistance Programme we offer immediate access to a confidential telephone counselling and legal information service that operates 24 hours a days, 365 days a year
- Eye Care Vouchers - We can provide you with substantial savings with free eye tests and discounts on prescription glasses
- Reward & Recognition - We recognise that employees have gone the extra mile via Employee of the month and year, special recognition and long service awards.
- Everyday discounts - via our benefit platform you will have access to over 50 retailer discounts for everyday savings!