Information Security Analyst

Hybrid in London·Full-time·Added 3 days ago (last checked 2 Nov)

Vitality

20 open roles

Apply

Our summary

Work mode: Hybrid, London
Contract: Permanent, full-time hours
Pension: Pension matched up to 6%

Skills

Pay & benefits

What you'll get

Bonus Schemes - A bonus that regularly rewards you for your performance
A pension of up to 12%- We will match your contributions up to 6% of your salary
Our award-winning Vitality health insurance - With its own set of rewards and benefits
Life Assurance - Four times annual salary

These are just some of the many perks that we offer! To view the extensive range of benefits we offer, please visit our careers page. Fantastic Benefits. Exciting rewards. Great career opportunities!

If you are successful in your application and join us at Vitality, this is our promise to you, we will:

Help you to be the healthiest you've ever been
Create an environment that embraces you as you are and enables you to be your best self
Give you flexibility on how, where and when you work
Help you advance your career by playing you to your strengths
Give you a voice to help our business grow and make Vitality a great place to be
Give you the space to try, fail and learn
Provide a healthy balance of challenge and support
Recognise and reward you with a competitive salary and amazing benefits
Be there for you when you need us
Provide opportunities for you to be a force for good in society

We commit to all these things because we want you to feel that you belong, and are supported to be happy and healthy.

The role

Help us keep Vitality secure, resilient and ready for what's next. As an Information Security Analyst, you'll play an important role in protecting our business and member data, identifying security risks and strengthening the controls that keep us secure. Working across teams and projects, you'll provide practical security advice, support our Information Security Management System and help Vitality stay aligned with recognised security standards and regulatory requirements.

What you'll do

Provide clear and practical information security advice to stakeholders across the business
Support the development and continuous improvement of the Information Security Management System to maintain ISO 27001 certification
Complete information security risk assessments across business processes, systems and projects, identifying appropriate mitigating controls
Conduct internal audits against ISO 27001 requirements and produce clear, evidence-based audit reports
Work with project managers to identify and address information security risks throughout the software development lifecycle
Develop, implement and maintain information security policies, standards, procedures and processes
Support the maturity of Data Loss Prevention, access management and security monitoring capabilities
Complete security due diligence on third-party suppliers, including site visits where required
Contribute to information security training, awareness activities and wider improvements to Vitality's security posture
Support the investigation and management of information security incidents and associated audit activity

Team - Information Security

Working Pattern - Hybrid - 2 days per week in the Vitality Bournemouth, London or Stockport Office. Full-time hours apply.

We are happy to discuss flexible working!

Top 3 skills needed for this role:

Proven security risk assessment
Strong regulatory compliance knowledge
Skilled stakeholder communication

What do you need to thrive?

Experience working within an information security role
Strong understanding of information security principles, data protection and regulatory compliance
Experience completing risk assessments and business impact analyses
Working knowledge of ISO 27001, ISO 27002, PCI DSS and other relevant security frameworks
Experience developing and implementing information security policies and procedures
Ability to conduct internal audits and produce clear audit reports
Experience supporting projects throughout the software development lifecycle
Understanding of information security monitoring tools and technical controls, including Data Loss Prevention and role-based access controls
A professional qualification such as CISSP, CISA or CRISC, or the commitment to work towards one