Information Security & Data Protection Technician

Informaton Security & Data Protection Technician

Permanent, Fulltime (Monday to Friday) Hybrid working is available - three days in the office and the rest from home.

Offices are located in central Derby, and enjoy good road, rail and bus links.

We have free parking, as well as bike racks and showers - for those that prefer a more energetic commute!

There’s lots to do …

We’re looking for an Information Security & Data Protection Technician to play a key role within our vibrant Head Office. The role provides pivotal support to both the Information Security Officer and Data Protection & Risk Administrator to enable the Data Protection Team to ensure compliance with GDPR, as well as maintaining and improving cyber security posture.

You’ll be responsible for first line response for vulnerability and intrusion detection management systems, managing the licencing for key security systems, and administrative support for fulfilling GDPR obligations for data subject access and data deletion requests.

Key Responsibilities: • Monitoring and administration of security systems including anti-virus/end point protection, IDS, vulnerability scanning, and RMM Endpoint management systems.

• Resolving vulnerability issues identified by monitoring systems or escalating where necessary.

• Licence administration for security systems including anti-virus / end point protection, firewall / MFA, and email encryption.

• Supporting the Data Protection & Risk Administrator with fulfilling data subject rights under UK GDPR such as data collation for subject access requests in line with SLA targets and legal timeframes.

• Third party patch management for clients.

• Housekeeping administration for Office365 and Active Directory.

• Triage support requests from other departments e.g. Service Desk, Phishing reporting mailbox and Data Protection mailbox

• Other relevant administrative tasks commensurate with the post.

KPIs

• Resolve vulnerabilities within SLAs linked to CVSS scores

• Ensure licencing matches number of active users

• Respond to data subject rights requests within regulatory timeframe

Full training will be provided to ensure you can quickly get up to speed, but to be successful in this role you need to demonstrate:

• A broad and contemporary range of IT Security knowledge with experience of network, server, application and end user computing.

• Experience in identifying and/or implementing solutions to security risks and vulnerabilities.

• Awareness of GDPR / UK Data Protection legislation.

• Strong organisational and personal management skills, capable of operating independently with minimal direction in an environment with multiple, and sometimes conflicting priorities.

• Attention to detail and proven track record in working with effective administrative processes. High levels of energy and personal motivation to support others.

Demonstrated ability to stay calm and work effectively under pressure.

• Previous work experience within financial services environment would be an advantage