Junior Information Security Analyst

Are you passionate about growing your career in information security? We have an exciting opportunity for a motivated individual to join our dynamic team in Newcastle upon Tyne as a Junior Information Security Analyst.

This role is perfect for someone looking to build a strong foundation in information security and take the next step in their IT career. As a Junior Information Security Analyst, you’ll play a vital role in supporting our security initiatives, working closely with our experienced team to protect our organization and its customers.

In this position, you’ll be involved in various aspects of IT security, from daily operations to strategic projects. Reporting directly to the Information Security Officer, you’ll have the opportunity to enhance your skills and grow within a supportive environment that values your contribution to our security efforts.

This is a hybrid role that requires you to be in our Newcastle-upon-Tyne office two days a week. Please apply only if you’re comfortable with this arrangement.

What you’ll be doing
Strategy Implementation:

Support the development and implementation of the Information Security Strategy
Work with the security team to implement a Blue Team / SOC framework
Legal, Regulatory and Compliance:

Work alongside business units to assist in implementing appropriate controls in line with the ISO/IEC 27001, PCI, and SOC standards
Contribute to the creation and maintenance of Information Security Policies and Standards
Technical Security:

Take an active role in the management of security systems including Vulnerability Management, DLP, IDS/IPS, AV, SIEM, Firewalls and other network security systems, Endpoint Protection and Device Control systems
Measure the effectiveness of security controls through metrics and KPIs
Analysing events in our SIEM and investigating issues
Consulting on day-to-day security issues
Testing the security of our platform and products
Working with our engineering team to build secure technical solutions
Security Incident Management:

Assist with regular security issues and incidents investigations reported to the team
Contribute to the creation and maintenance of a cyber incident management plan which is tested twice yearly
Risk Management:

Assist with the identification of security risks and treatment plans
Conduct security impact assessments to understand the level of risk Bede information systems are being exposed to
Vendor Risk Management:

Support due-diligence activities on 3rd parties as part of Vendor Risk Management
Education and Awareness:

Support the development, maintenance and communication of our security awareness programme