Information Security Analyst

Role Description

The Information Security Analyst plays a key role in supporting Allianz UK's Information Security initiatives, with a focus on executing the Governance, Risk, and Compliance (GRC) activities and implementing the NIST Cyber Security Framework (CSF) across the organisation.

The NIST analyst will involve in day-to-day GRC operations, such as designing and implementing security controls, interpreting requirements from the Group Information Security Framework, managing non-compliance issues and information security risks.

As an Information Security Analyst at Allianz UK, you will be pivotal in advancing the company's Information Security initiatives by executing Governance, Risk, and Compliance (GRC) activities and implementing the NIST Cyber Security Framework (CSF) organization-wide. Your role will involve daily GRC operations, including designing and implementing security controls, interpreting requirements from the Group Information Security Framework, and managing non-compliance issues and information security risks.

Salary Information

Pay: Circa £45,000 per year.

Pay is based on relevant experience, skills for the role, and location. Salary is only one part of our total reward package.

About you

• Conducting assessments to identify material gaps, analysing potential risks, and monitoring progress on maturity uplifting across security functions.

• You will be developing and implementing an information security controls catalogue, policies, and procedures aligned with the NIST Cyber Security Framework (CSF).

• Collaborating with the wider organization to integrate control testing and risk management activities into the existing governance framework.

• Assisting cross-functional teams and business units in integrating security measures into business operations.

• Supporting compliance activities with the Group Information Security Framework, Cyber Essentials, and PCI DSS attestation.

• Facilitating regular reviews and updates of control and risk management processes to remain effective and responsive to emerging threats and changes in the organizational landscape.

Essential Skills

• Minimum of 2 years of experience in information security, with solid understanding of Information Security control and governance frameworks.

• Experience of developing information security controls catalogue in the financial services sector is highly desirable.

• Experience of security transformation and delivery of security projects, particularly within a federated organisation.

Desirable Skills

• Knowledge of Information Security and compliance frameworks, including NIST CSF, ISO 27001, Cyber Essentials, PCI DSS, and DORA, and the ability to design controls that align with these standards.

• Good awareness of risk methodologies and ability to analyse data for report generation.

• Skills in creating and maintaining comprehensive documentation, including control matrices, design process flows, and standard operating procedures.

• Strong communication and interpersonal skills, with the ability to convey complex security concepts to non-technical stakeholders.

• Relevant certifications such as CISSP, CCSP, CRISC, CISM, or ISO 27001 Lead Implementer are highly desirable

What We Will Offer You

Recognised and rewarded for a job well done, we have a range of flexible benefits for you to choose from- so you can pick a package that’s perfect for you. We also offer flexible working options, global career opportunities across the wider Allianz Group, and fantastic career development and training. That’s on top of enjoying all the benefits you’d expect from the world’s number one insurance brand, including:

·Flexible buy/sell holiday options

·Hybrid working