IT Security Analyst - Insurance - London, City

Hybrid working - 2 days in the office per week and the remainder working remotely

An exciting opportunity has arisen to join this Global Insurance Company as an IT Security Analyst working closely and reporting into the Head of Information Security.

The Information Security Analyst will be assisting in developing and implementing information security, BCM, and operational resilience policies, procedures and standards. Other responsibilities will include monitoring and analysing potential threats, vulnerabilities, and risks to the businesses information systems, data and operational resilience.

Key responsibilities:-

• Continuously monitor the organisation's network, systems and applications for security threats and vulnerabilities. Investigate and respond to security alerts and incidents
• Identify and assess vulnerabilities in software, hardware, and infrastructure.
• Assist in incident response efforts, including containment, investigation and recovery. Document all incident response activities for post incident analysis
• Contribute to the development, implementation, and enforcement of security policies, standards, and procedures
• Oversight user access controls, including user account provisioning, deprovisioning, and permissions management. Monitor identity and access management process
• Analyse security logs, events, and alerts to detect unusual or suspicious activities. Conduct security assessments and risk evaluations.

Skill/experience required:-

• Previous experience working in the Insurance Market is highly desirable
• Relevant industry certifications, such as Comp-TIA Security+, Certified Information Systems Security Professional (CSSP), or Certified Information Security Manager (CISM) are highly desirable
• Proven experience in Information Security roles, including security monitoring, vulnerability management, and incident response
• Strong knowledge of security principles, practices, and technologies
• Proficiency with security tools and technologies
• Understanding of regulatory compliance requirements and industry standards
• Strong knowledge on Third Party Security assessment