IT SECURITY AND COMPLIANCE ANALYST

We are recruiting for an experienced IT Security & Compliance Analyst to join us in Head Office, based in Measham. This role will require you to work closely with the IT Department, Senior Management, Business Systems users and Suppliers. Reporting to the Network & Infrastructure Manager, you are expected to be fully aware of the enterprise’s security and data protection goals as established by its stated policies, procedures, and guidelines and to actively work towards upholding those goals.

You’ll be working for one of the largest privately-owned housebuilding groups in the UK – and you will be a part of a family owned business where we value you, your contribution, and your ideas.

MAIN DUTIES

Strategy & Planning

• Participate in the planning and design of enterprise security architecture, under the direction of the IT Network & Infrastructure Manager, where appropriate.
• Participate in the creation of enterprise security and data protection documents (policies, standards, baselines, guidelines, and procedures) under the direction of the IT Director or the IT Network & Infrastructure Manager, where appropriate.
• Participate in the planning and design of an enterprise business continuity plan and disaster recovery plan, under the direction of the IT Network & Infrastructure Manager, where appropriate.

Acquisition & Deployment

• Maintain up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors.
• Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security.
• Perform the deployment, integration, and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically.

Operational Management

• Collaborate with the organisation’s IT director, IT trainer and human resources department to ensure company security and data protection policies, procedures, forms, notices, and materials are maintained and published to the relevant audience.
• Oversee the coordination of Head Office and regional staff and any relevant third parties in responding to subject access requests (SAR). Conduct data filtering and quality control on information gathered in the process of responding to a SAR.
• Maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices).
• Maintain operational configurations of all in-place security solutions as per the established baselines.
• Monitor all in-place security solutions for efficient and appropriate operations.
• Review logs and reports of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices). Interpret the implications of that activity and devise plans for appropriate resolution.
• Participate in investigations into problematic activity.
• Participate in the design and execution of vulnerability assessments, penetration tests, and security audits.
• Provide on-call support for end users for all in-place security solutions.
• Provide guidance and/or instruction to junior staff members.
• Attending meetings that may be necessary in the performance of your duties.
• Maintaining IT Infrastructure projects and supporting other IT departments with project tasks.
• Complying with and uphold company policies and procedures.
• Undertaking any additional tasks as may reasonably be required from time to time.

ESSENTIAL SKILLS / ATTRIBUTES

• Full driving licence.
• College diploma in the field of computer science or equivalent.
• Certified in Microsoft Technology.
• Previous experience within a 3rd Line Support role (or similar).
• Hands-on software and hardware troubleshooting experience.
• Experience documenting and maintaining configuration and process information.
• Experience dealing with multiple aspects of IT Security.

COMPANY BENEFITS

• Company Car
• Scottish Widows Pension Scheme
• 33 days holiday entitlement (including bank holidays)
• Group Staff Discount at Triumph Motorcycles ltd.
• Competitive discount on our homes (dependent upon the property and location)

If you feel this vacancy could be your new career forward an up-to-date copy of your CV.