Information security analyst

Information sec within a fast paced environment

Contact number:

Holidays:
25 holidays plus bank holidays, increasing to 28 after 5 years

Pension: 6%

Additional Benefits:

• Parking on site
• Broadband
• Mobile and laptop

Region: West Yorkshire

We are looking for an Information Security Analyst to join our existing IT team.

Working with the Head of IT and a current IT team of 6, you will provide advice and guidance on information security and further develop security policies and processes across the entire infrastructure estate.

This role shall be responsible for supporting and maintaining information-driven solutions within a fast-paced and challenging environment. As a member of the IT team, you will review all aspects of the information systems environment and its components. The successful candidate will be required to proactively improve and provide advice and guidance on information security matters. You will feel comfortable in a role with autonomy, being the sole information security employee within the group, enjoying responsibility and working closely with the IT team.

We believe this is an excellent opportunity for candidates who have a strong understanding of IT infrastructure and information security and enjoy fast-paced environments.

• Assist with information security incident management and response activities
• General day-to-day support on managing and responding to security alerts from systems and end users
• Perform daily, weekly, and monthly security checks, reconciliation, compliance checks, and investigate exceptions
• Fulfil information security requirement questionnaires and support the process
• Identify security risks
• Report security risks to the Head of IT and the board
• Create security policies, processes, and procedures
• Compile a list of technical controls to strengthen the airport's security capabilities and resilience to continued cyber threats
• Be aware of information security risks, mitigations, and opportunities to strengthen resilience to cyber-attacks and information security incidents
• Implementation of monitoring and reporting systems and applications
• Document user requirements and technical training guides
• Test information security disaster recovery capabilities, identifying issues and working with the organisation to drive continual improvements

• Hands-on experience of information security
• Exposure to information security standards including but not limited to Cyber Essentials, ISO 27001, ISO 27002, Data Protection Act, and the General Data Protection Regulation
• Good understanding of security testing principles, including experience of vulnerability scanning, identifying, resolving, and reporting risks
• Documentation creation

• Threat analysis
• Reporting
• Security incident response processes, procedures, and best practices
• Disaster recovery and business continuity principles
• Event and log analysis

• Confident individual with good interpersonal skills, able to deal with people at all levels and communicate to users in a clear, non-technical language
• Team player
• Analytically minded, able to break down and understand information
• Must be comfortable working in a fast-moving, dynamic environment
• Strongly customer-focused, used to providing support to demanding users
• Good organisational skills, used to managing and prioritising own workload
• Ability to report on progress, timescales, outstanding and completed activities

The IT team size is compact; therefore, there may be a shared responsibility within the team to offer support to each other.

They provide a great place to work, where each person has the opportunity and voice to affect change.

They enjoy a healthy, productive, and flexible working environment that respects work-life balance.