Information Security Analyst

Summary about this job

Detail information about job Information Security Analyst. Terms and conditions vacancy

For over 15 years Quantium have combined the best of human and artificial intelligence to power possibilities for individuals, organisations and society. Our solutions make sense of what has happened and what will, could or should be done to re-shape industries and societies around the needs of the people they serve.

The Information Security Analyst role will work within the ISO 27001 project team, helping ensure Quantium is able to successfully achieve its objective of operating in accordance with ISO 27001. The role will report to the Risk and Compliance Lead and fulfil duties under the guidance of the ISO 27001 Lead Implementer. The role will also work closely with other functions supporting the project, including IT, Legal, and HR, and must be comfortable working with a broad range of stakeholders to make sure objectives are delivered to agreed deadlines.

This role will be responsible for writing policies, outlining processes and procedures, collating technical information and filing control effectiveness artefacts in-line with the requirements of the ISO 27000 family of standards. You will need to show a bias for action, a keen eye for detail and the ability to manage conflicting deadlines effectively.

 Key responsibilities

• Document ISO 27001-aligned information security policies with support from the project team
• Collate technical information and artefacts, recording them in-line with ISO 27001 audit requirements
• Work with subject matter experts (SME’s) to review technical information and ensure accuracy and completeness on the project
• Undertake additional duties as/when required by the project on an adhoc basis

Key activities

• Participate in, and provide support, with documenting ISO 27001 security policies with support from the project team.
• Collect any technical/artefact findings to ensure they are aligned to ISO27001 audit requirements.
• Build great rapport with SME’s to ensure there is accuracy and entirety on the project.
• Build positive and trusted relationships with internal and external stakeholders

Experience and education required

• Build positive and trusted relationships with internal and external stakeholders
• 2+ years in an information security related role is required, ideally in professional services or Technology environment
• Knowledge of the requirements of the ISO 27000 family of standards is also needed
• Well-developed interpersonal skills, with the ability to work with a broad range of subject matter experts
• Experience in writing internal policies and outlining procedures
• An eye for detail, with the ability to summarise complex information and effectively communicate recommendations.
• A strong track record working both individually, and as part of a busy team
• Exceptional English – both written and verbal