Security Analyst / ISO 27001

Zenith People

Permanent Position 40% Office Based (2 days in office / 3 days at home)

Are you a seasoned IT professional with expertise in information security? We’re currently seeking a talented individual to join our client’s IT Team as a Security Analyst. As a pivotal player in their global operations, you’ll be instrumental in fortifying their IT environment and ensuring robust security practices.

Key Responsibilities:

• Document Management & File Server Security: Enhance and manage security protocols for Document Management Systems and file servers.
• Cloud Security Enhancement: Spearhead the elevation of cloud security across the business.
• Proactive Monitoring: Execute regular checks and generate standard reports to maintain a vigilant watch over the system.
• Security Configuration & Escalation: Configure security parameters and serve as the go-to person for escalated technical issues.
• Threat Identification & Action: Swiftly identify, report, and take action on threats, vulnerabilities, and unusual events.
• Security Infrastructure Development: Contribute to the development and maintenance of firm-wide security infrastructure configurations, policies, and procedures.
• Forensic Investigations: Utilise cutting-edge security tools for forensic investigations, collaborating with external agencies as needed.
• Project Team Collaboration: Collaborate seamlessly with project teams to ensure adherence to security policies and governance standards.
• Industry Awareness: Stay ahead of the curve on security risks and exposures, actively promoting effective counter-measures.
• Diagnostics & Analysis: Conduct diagnostics and analysis on firewalls, routers, switches, and associated systems for optimal reliability and security.
• Threat Intel & Vulnerability Reporting: Provide valuable threat intelligence and vulnerability information to the broader IT team.

Key Attributes/Skills:

Essential:

• Solid IT background with a minimum of 3 years in Information Security.
• Proven experience in resolving technical security issues.
• Working knowledge of endpoint security solutions and infrastructure security.
• Familiarity with security frameworks (ISO 27001, Cyber Essentials+, NIST).
• In-depth knowledge of network, server, desktop security components, e.g., Azure AD, Windows Server, Office 365, Firewalls, SIEM, MFA.
• Proven ability to work collaboratively and independently.
• Excellent communication and presentation skills.
• Proactive, well-organized, with attention to detail.
• Experience in office-based and remote support environments.

Desirable:

• Knowledge of legal-specific software and document management systems (iManage).
• Familiarity with Crowdstrike.
• Security-related certifications (CompTIA Security+, GSEC, CISSP, SSCP, CCSP, CISM).