Average Information Analyst salary in the UK

We are looking for an Information Security Analyst to join us on a 3 month Fixed Term Contract who can write and produce effective policy, standards and procedure documents in line with BAIT and other security standards We are looking for candidates to be able to: Implement information Security industry standard (ISO27001) documentation (framework, processes, procedures, policy etc) in compliance with standards, specifically BAIT.Define and document reporting, responsibilities, and processes for Information Security Officer, in regional offices.Implementing any measures or findings identified in audits Governance and Policy Development and support of information security and compliance frameworks.Key areas: ISMS, IAM, BCM, IRMReview of IT policies, performing policy gap analysis and assisting in the development of supporting standards. Additional Duties & Responsibilities Support the Security team with the implementation and running of a best practice Information Security function. This will deliver continual improvements in support of Security, Audit and Risk management. As part of the Information Security team, a focus will be on the development of policies, standards procedures and processes to demonstrate the implementation, running, monitoring and reporting on security.Support IT Compliance Manager in any related tasks to facilitate meeting the requirements of audit and compliance KEY SKILLS AND EXPERIENCE Essential Knowledge of BAIT and ISO27001Experience writing and producing effective policy, standards and procedure documents in line with BAIT and other security standardsInformation Security best practice and its implementationGood understanding of IT Risk Management, Compliance and AuditingEnjoys problem solving, able to use initiative and apply a pragmatic approach when dealing with security issuesAble to work with Technical Security experts and Business stakeholders equally Desirable Experience working with German regulators (BAFIN)German language proficiencyExperience of Centralised/Group standards and Local/Regional implementations CMC Markets is an equal opportunities employer and positively encourages applications from suitably qualified and eligible candidates regardless of gender, sexual orientation, marital or civil partner status, gender reassignment, race, colour, nationality, ethnic or national origin, religion or belief, disability or age.

Senior Information Security Analyst Hybrid / Basingstoke (3 Days a week)We're looking for a Senior Information Security Analyst to join a an innovative, market-leading insurance company. Their Information Security team have a clear mandate to identify, manage and remediate security risk across the organisation, playing a pivotal role in safeguarding our data and infrastructure from cyber-attack.You will be responsible for a broad remit, including Security Tooling (deploying, managing and optimising security tools including network monitoring, email security, data loss prevention and others) in addition to the identification, quantification, and response to identified cyber security risks across the organisation.This role will allow you to get involved in everything Security and expand on your own experience, working in a smaller team allowing you to have the autonomy you need.Requirements:* Experience working with cloud environments (Azure, AWS or GCP)* Continuous improvements of security processes.* Security control frameworks (such as NIST CSF, CIS benchmarks, ISO27001, SOC2)In addition to hybrid working our client offers annual performance related bonus and clear progression pathways.

We are looking for a highly skilled and motivated Information Security Analyst to join our team. In this role, you will play a crucial part in evaluating cybersecurity controls, conducting risk assessments, and collaborating with cross-functional teams. You will support our Information Security Manager in maintaining all aspects of information security risk management, responding to security inquiries and incidents, and ensuring compliance with relevant regulatory requirements. Key Responsibilities: * Support the delivery of the Information Security Management System and drive continuous improvement in information security. * Evaluate and assess cybersecurity controls across the business and third-party vendors to ensure compliance with the NIST Cyber Security Framework (CSF). * Conduct comprehensive risk assessments using the NIST CSF. * Identify cyber threats, risks, and issues using risk management techniques. * Develop and conduct third-party vendor security assurance activities. * Collaborate with cross-functional teams to develop and implement risk management activities. * Respond to security support tickets and provide information security support and escalation. * Create and collect metrics, validate security control performance, and identify emerging cyber risks. * Collaborate with the Enterprise Risk Management (ERM) team to maintain, develop, and deliver cyber risk reporting and appetite statements. * Maintain and develop Information Security policies and procedures relevant to the current cyber threat landscape. * Maintain, develop, and test the Cyber Incident Response Plan. * Monitor and manage compliance with relevant cybersecurity regulations. * Manage actions and output from stakeholder engagements, including customers, regulators, and auditors. * Stay current with emerging security trends, threat intelligence, industry standards, and security-enhancing technologies. Essential Skills, Knowledge & Experience: * Proven experience in an Information Security role. * Experience working in a professional or financial services environment. * Hands-on experience conducting cyber risk assessments and developing mitigation strategies. * Experience with cybersecurity control assessments and maintaining risk reporting and appetite statements. * Knowledge and experience with recognized security frameworks such as NIST CSF, ISO27001, etc. * Experience managing and maintaining cybersecurity compliance with regulatory frameworks such as FCA, PRA, NYDFS. * Experience developing a governance framework by maintaining policies and procedures. * Ability to meet agreed deadlines and work independently or collaboratively. * Knowledge of Microsoft systems (on-premise and Azure cloud), technologies, infrastructure, and systems management tools. * Ability to respond positively to exceptional events in information security. This is a fantastic opportunity to contribute to a company committed to continuous improvement in information security during a time of digital transformation and growth. If you are passionate about cybersecurity and meet the above criteria, we would love to hear from you.