IT Security Analyst

Main Responsibilities:

-Ensures current and comprehensive IS Security Policies and Guidelines are in place to safeguard the business.
-Perform compliance analysis of processes, systems and controls to ensure ongoing operational effectiveness of the IT General Control environment.
-Manage and monitor physical access to secure areas (e.g. Data Centres, Comms Cabinets)
-Ongoing monitoring of security network control devices such as firewalls, Intrusion Detection systems, Proxy services and Data Leak prevention solutions.
-Assess emerging threats and system vulnerabilities, triggering appropriate IT response to manage risk within the company risk appetite.
-Ongoing monitoring of log files from key IT Systems
-Ensure analysis, coordination and publication of appropriate reports on incidents, events of interest and control failures
-Assist with production of the monthly and quarterly security management dashboard.
-Assist with the delivery of IT Security Awareness programme’s to ensure necessary understanding of the roles, responsibilities and importance of IS Security
-Assist with the management of maintaining all IS related compliance programme’s including PCI DSS (Payment Card Industry Data Security Standard), End User Computing
-Sources and provide support and skills for IS Security investigations and forensic assessments where appropriate
-Co-ordinates and liaises on IT related internal and external Audit activities
-Organise regular IT Security Testing including; Web Penetration Testing, Internal Network Penetration Testing, Wireless Network Reviews
-Assist with ISO2700x assessments and reviews
-Conduct annual IT Security Third Party Reviews.
-Liaise with the IT Security Team in the UK to share ideas, techniques and information where applicable
-Liaises with business representatives to ensure the quality and appropriateness of IT service and solutions from an IS Security perspective
-IT Security Incident Management
-Ensures adherence to IT change management standards
-Builds relationships with key IT suppliers and maintains awareness of their services and strategies
-Is flexible within the role and prepared to undertake other duties as assigned by line manager from time to time including out of hours working.

Key Skills:

-Good understanding of ICT systems and technologies (e.g. Linux and Windows operating systems, TCP/IP networking)
-Good knowledge of Payment Card Industry Data Security Standard (PCI DSS) and IDS/IPS
-Working knowledge of Log Analysis and Monitoring – Syslog, RACF, IPS, Firewalls, IIS
-An active team player who shares ideas, information and demonstrates flexibility
-Strong Customer Service ethos to support an environment where excellence in customer service is the norm
-Working knowledge of ISO2700x and IT Auditing processes

Desirable:

-Third Level IT Qualification
-CISM
-CISSP