Information Technology Security Officer

About this role

IT Security Officer

Working pattern: Full-time, hybrid

Sponsorship: Not available

Why this role?

I'm looking for IT Security Officer to support the Information Security Officer and help find and close security gaps across the organisation.

This is a hands-on role covering security tooling, incident response, vulnerability management and risk. You’ll work with IT and the wider business to put controls in place, investigate incidents and make sure security issues are followed through to resolution.

What you’ll be doing

• Maintain security controls and tooling across vulnerability scanning, endpoint security and network monitoring.
• Investigate security alerts and coordinate incident response from containment through to recovery.
• Run vulnerability assessments, coordinate penetration tests and make sure issues are fixed.
• Assess security risks, agree mitigation plans and escalate serious issues.
• Help control owners put effective controls in place and provide the evidence to prove they work.
• Set security requirements for projects, infrastructure changes and new technology.
• Support audits and compliance reviews, and keep security processes, policies and incident records up to date.

What we’re looking for

You’ll need hands-on experience across several of the following:

• Security operations, cyber defence or technical information security.
• Investigating and responding to security incidents.
• Vulnerability management and penetration-testing processes.
• Security tools such as Tenable, endpoint security platforms, vulnerability scanners or network monitoring systems.
• Experience working in London insurance is essential.

You’ll need to investigate technical issues properly, explain risk in plain language and work well with engineers, control owners, risk teams and senior stakeholders.

The details

• £60,000 salary.
• Two days per week in either the London or Birmingham office, with the remaining days working from home.
• Sponsorship is not available.
• Three interview stages: two technical interviews and one HR interview.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.