Information Security Consultant

Information Security Consultant

Leeds – Onsite

Up to £70k

Key Duties and Responsibilities

Assist with security incident management and response activities

General day-to-day support on managing and responding to security alerts from systems and end users

Perform daily, weekly, and monthly security checks, reconciliation and compliance checks and investigate exceptions 

Completing client security requirement questionnaires and support the bidding process

Identify and raise awareness of security risks

Develop and enhance security policies, processes, procedures, and technical controls to strengthen security capabilities and resilience to cyber threats

Take a proactive role in identifying security risks, mitigations, and opportunities to strengthen resilience to cyber-attacks and security incidents

Participate in the design and implementation of systems and applications 

Develop user and technical training guides 

Maintain and manage the IT Risk register 

Test DR plans and capabilities to ensure they work as designed, identifying gaps and lessons learnt and work with the business to drive continual development and enhancement

Technical Requirements :

Two years hands-on experience of security and/or infrastructure within an enterprise environment

Exposure to enterprise information security standards including Cyber Essentials, ISO 27001, 27002 etc. Data Protection Act and the General Data Protection Regulation

Microsoft O365 Security solutions; Networking; Security operations; Vulnerability Management; Security Auditing

Good understanding of security testing principles, including experience of vulnerability scanning, identifying, resolving, and reporting risks

Experience of formal document creation, such as the creation of reports or procedures

Detailed knowledge of:

Microsoft O365 environment

Threat Intelligence analysis and best practice

Security Incident Response processes, procedures, and best practices

Disaster Recovery and Business Continuity principles 

Event and log analysis