IT Security Analyst

IT Security Analyst – GRC Focused

Permanent – £45k-£54k + strong benefits

Location: Hybrid – Southampton area

Your new company:

I am looking to recruit a skilled IT Security Analyst to join a global leader in the trade/logistics space based in the heart of Southampton. You’ll be working for a business that expedites and simplifies the import/export process through innovative technology solutions. Due to multiple recent acquisitions the environment is ripe for integrations and digital transformation. This role will be hybrid, likely to be 3 days in office a week, in Southampton, so you will need to be based within a commutable distance.

The role responsibilities:

This is an IT Security Analyst role that focusses more on the GRC and policies/procedures rather than being a SOC/Technical Security Analyst role. The client is looking for someone who is experienced with ISO27001 and someone who can own documentation and support the ISMS. It is likely that the role will grow and develop in the future. In the clients’ words, key elements of the role include:

• ISMS Operation and Improvement: Support ISO 27001 compliant ISMS.
• Policy Development: Create and maintain IT compliance policies and guidelines.
• Risk Management: Identify, assess, and mitigate IT risks; work with asset owners on remediation.
• Control Management: Support security controls like identity management, encryption, and network security.
• Asset Management: Monitor and manage assets, software, and licensing.
• Auditing & Monitoring: Lead IT audits, address findings, and participate in internal/external audits.
• Security Technologies: Oversee cyber security tools and ensure effective responses to alerts.
• Operational Security: Review security logs and alerts, identify issues, and implement remediations.
• Incident Response: Respond to IT compliance and security incidents, document actions, and learn from them.

You will need:

• GRC skills and strong communication skills
• Strong understanding of risks associated with bad security processes.
• Experience working with an ISO 27001 ISMS.
• A solid understanding of the cyber security risks associated with various technologies and how to apply appropriate controls to mitigate these.
• Experience in risk assessment and management in the context of information security.
• CompTIA Security+ and ISO27001 certificates would be advantageous.

What you’ll get in return:

As well as a salary of up to £54000, there is also a company bonus scheme up to 10%, BUPA healthcare, 25-28 holiday days + bank holidays, flexible working hours, free parking, 4x life assurance and company health cash plan. On top of this they will fund courses/qualifications to improve your skill set and you’ll get access to their flexible benefits platform to select other benefits that suit your circumstances.