Senior Information Security Analyst

Department

Technology

Canary Wharf Limited

Associate Director - Information Security & IT Risk

Under the direction of the Associate Director - Information Security & IT Risk the post‑holder will play an important role in protecting the Canary Wharf Estate and Canary Wharf Group from information and cyber security threats and hazards. From the outset the post‑holder will be exposed to a wide range of stakeholders across all levels and will gain great insight into how information security is managed in the organisation and support the business strategy.

Salary range 70,000 – 75,000 per annum.

• Support the Associate Director in the development of new information and cyber security policies, processes, and procedures.
• Act as Senior Information Security partner to stakeholders and internal Technology teams across Canary Wharf Group, working proactively to embed security into initiatives, programmes, and projects through early engagement and pragmatic, risk‑based advice.
• Provide expert review and challenge of technology solutions and designs, advising on security risks, control requirements and opportunities to improve information and cyber security maturity.
• Help design, assess and improve technical security controls, including leading Cloud Security Assessments and tracking remediation activities.
• Lead third‑party information security risk management activities, including supplier security assessments, risk evaluations and engagement with vendors to address identified security gaps.
• Lead information security assurance activities, including control effectiveness reviews, thematic assessments and support for internal and external audits, ensuring findings and remediation actions are managed to completion.
• Play a key role in the operation and continual improvement of the ISO 27001 Information Security Management System (ISMS) and Cyber Essentials Plus, including control ownership, audit preparation and evidence management.
• Ensure information security is embedded into organisational change by collaborating closely with Technology and project delivery teams, providing security input and sign‑off for projects, system changes and new services and promoting security‑by‑design principles.
• Provide senior information security support during security incidents, including impact assessment, containment advice, lessons learned and post‑incident improvement activities.
• Own and evolve the group‑wide information security education and awareness programme, including the design and delivery of targeted training and in‑person sessions for colleagues and senior stakeholders.
• Develop and maintain information security metrics, dashboards and reporting to support governance forums and senior management decision‑making, including risk posture, control maturity and compliance status.
• Further professional development and understanding of information and cyber security through completion of training and attendance at industry conferences.
• Assist the data protection team with Data Protection Impact Assessments and related tasks.
• Deputise for the Associate Director – Information Security & IT Risk when required, providing leadership, continuity of service and mentoring support to junior team members.

• At least 3 years of experience in Information Security or a closely related discipline.
• Holders of a STEM (Science, Technology, Engineering or Mathematics) qualification are preferred; individuals from all educational backgrounds will be considered. Qualifications such as CISM, CRISC, CompTIA Security+ or equivalent are desirable.
• Practical experience with enterprise security tools and technologies (e.g. endpoint protection, data loss prevention, identity and access management, security monitoring and threat detection solutions).
• Ability to interpret outputs from security tools and use them to inform risk decisions and remediation activities.
• Ability to work autonomously and manage projects/tasks through their lifecycle to completion.
• Awareness of recent developments which have impacted information and cyber security.
• Understanding and appreciation of why information and cyber…