Infosec and Governance - £34-36K - Hybrid Manchester

Discipline: Security / Cyber
Job type: Permanent
Salary: £36000
Contact name: Liam Scott

Contact email: liam@exalto-consulting.com
Job ref: 656331
Published: 16 days ago
Startdate: ASAP
Infosec and Governance - £34-36K - Hybrid Manchester - must be eligible for SC clearance and have UK driving licence 

Are you passionate about information security and governance, with a strong focus on risk management and compliance? We are looking for an InfoSec and Governance Analyst to join our team, helping to ensure the security and integrity of our IT systems and data.

About the Role: As an InfoSec and Governance Analyst, you will play a key role in supporting IT security, risk management, and compliance initiatives within the organisation. You will assess risks, perform control assessments, and ensure that IT security controls are effectively implemented to mitigate risks. Working with various stakeholders, you will help ensure compliance with established frameworks such as ISO 27001, PCI DSS, and NIST, while continuously strengthening the organisation's security posture.

Key Responsibilities:
· Conduct IT/IS risk management activities, including control assessments and risk-based audits, to ensure effective risk mitigation.
· Support compliance initiatives, ensuring adherence to frameworks like ISO 27001, PCI DSS, CIS 20, and NIST.
· Assist in planning, executing, and supervising controls assessments, identifying areas of improvement in IT security controls.
· Provide detailed reports and analysis of risk and compliance activities, offering insights to improve the organisation’s security governance.
· Collaborate with internal teams to ensure security policies and procedures align with best practices and regulatory requirements.

What We’re Looking For:
· Qualifications: Degree in a relevant discipline or equivalent experience in Governance, Risk, and Compliance (GRC). Holding or working towards relevant security certifications (e.g., CISSP, CISM, CRISC) would be an advantage.
· Experience: Experience in IT security or IT assurance roles, with a focus on risk management, compliance, and control assurance assessments.
· Knowledge: Strong understanding of IT/IS risk management concepts, IT risk and assurance frameworks, and the role of controls in mitigating risks. Familiarity with industry standards like ISO 27001, PCI DSS, CIS 20, and NIST.
· Skills: Excellent analytical and reporting skills, with a collaborative approach to working with internal and external stakeholders. Strong interpersonal communication skills are essential for success in this role.

Infosec and Governance - £34-36K - Hybrid Manchester - must be eligible for SC clearance and have UK driving licence