About the role
IT Security Analyst - GRC Focused
Permanent - £45k-£54k + strong benefits
Location: Hybrid - Southampton area
Your new company
I am looking to recruit a skilled IT Security Analyst to join a global leader in the trade/logistics space based in the heart of Southampton. You'll be working for a business that expedites and simplifies the import/export process through innovative technology solutions. Due to multiple recent acquisitions, the environment is ripe for integrations and digital transformation. This role will be hybrid, likely to be 3 days in the office a week, in Southampton, so you will need to be based within a commutable distance.
Your new role
This is an IT Security Analyst role that focusses more on the GRC and policies/procedures rather than being a SOC/Technical Security Analyst role. The client is looking for someone who is experienced with ISO27001 and someone who can own documentation and support the ISMS. It is likely that the role will grow and develop in the future. In the clients' words, key elements of the role include:
ISMS Operation and Improvement: Support ISO27001 compliant ISMS.
Policy Development: Create and maintain IT compliance policies and guidelines.
Risk Management: Identify, assess, and mitigate IT risks; work with asset owners on remediation.
Control Management: Support security controls like identity management, encryption, and network security.
Asset Management: Monitor and manage assets, software, and licencing.
Auditing & Monitoring: Lead IT audits, address findings, and participate in internal/external audits.
Security Technologies: Oversee cyber security tools and ensure effective responses to alerts.
Operational Security: Review security logs and alerts, identify issues, and implement remediations.
Incident Response: Respond to IT compliance and security incidents, document actions, and learn from them.
What you'll need to succeed
GRC skills and strong communication skills
Strong understanding of risks associated with bad security processes.
Experience working with an ISO 27001 ISMS.
A solid understanding of the cyber security risks associated with various technologies and how to apply appropriate controls to mitigate these.
Experience in risk assessment and management in the context of information security.
CompTIA Security+ and ISO27001 certificates would be advantageous.
