Information Security Analyst

Company	National TrustSee more
Address	Wiltshire, England
Form of work	Permanent, full-time
Salary	£44,500 per annum
Category	Banking

Job description

Summary

We are currently recruiting for an Information Security Analyst to join our team and play a key role in risk and compliance, driving change and awareness, assisting with security requirements, supporting the Information Security framework and assisting business-wide colleagues to find the right solution for them and the National Trust.

This is a great opportunity for an individual who is looking to make their next step up in their security career and advance their skills and experience with a major charitable organisation that will offer development and career progression.

What it's like to work here

Reporting to the Information Security Manager, you'll be providing assurance of the completeness and effectiveness of security controls across the National Trust’s businesses and be a proactive advocate of Information Security good practice with respect to GRC (Governance, Risk and Compliance). You'll understand the security risks that the Trust may face and what controls are needed, where vulnerabilities have been found.

Your contractual location will be our head office in Swindon and there will be an expectation for you to attend the office. However, there is flexibility on where you are based at other times. You will be required to work at a National Trust location for 40-60% of your working week. This will be discussed in more detail at interview.

What you'll be doing

We expect the role holder to provide Information Security advice and apply best practices to drive awareness, assist with the implementation, monitoring and assurance reviews of IT security controls and manage the policy development lifecycle. You’ll ensure that strong relationships are built with key business and IT stakeholders and work with stakeholders to propose and agree security remediation. You’ll undertake due diligence of new suppliers and technology solutions by performing risk assessments and supplier reviews and support the security awareness and training activities, ensuring it engages employees and volunteers to understand and adopt the principles in the manner which they work. You’ll demonstrate security continuous improvement in ways to engage and communicate to key stakeholders.

Who we're looking for

You can view the full role profile for this role in the document attached, this is just to provide a full picture of what is possible in this role, we’d love to hear from you if you have:

A wealth of experience of working as part of a team, supporting all members of the team when needed but also capable of being independently motivated, self-sufficient, and able to multitask.
Excellent communication skills, written and verbal, including the ability to communicate with people with varying levels of technical knowledge.
The ability to challenge effectively and provide well thought out justification and reasoning – with alternative recommendations, as appropriate.
A strong working understanding of Data Protection and GDPR, Information Security management frameworks such as ISO/IEC 27001 and NIST; and PCI DSS.
A proven background of working in an Information Security GRC capacity with broad and solid understanding of Information Security concepts and risks.
A recognised certification to CompTIA Security+ or equivalent and you will be working towards professional exams in the field of Security frameworks, risk management or assessment and testing.
Experience with IT Infrastructure and cloud technology

The package

The National Trust has the motto ‘For everyone, for ever’ at its heart. We’re working hard to create an inclusive culture, where everyone feels they belong. It’s important that our people reflect and represent the diversity of the communities and audiences we serve. We welcome and value difference, so when we say we’re for everyone, we want everyone to be welcome in our teams too.