Listing Description

This is a fantastic opportunity to join our Information Security team by directly supporting the delivery of change throughout the business. The purpose of the Information Security Analyst is to support and operate the day-to-day activities of the team and to ensure security initiatives, controls and governance processes are implemented and remain adequate over time.

This is a hybrid role, with the expectations of 2 days a week in the Cambridge office. 

Responsibilities:

• Support Information Security management to sustain business operations, through new vendor and integration assessments, change control, and risk management.


• Conduct research to identify and implement security measures to protect systems and information infrastructure


• Evaluate requests for new software, systems and applications, ensuring sufficient security controls are in place


• Support the information security risk management process by identifying, evaluating, treating and monitoring threats to data confidentiality, integrity and availability.


• Provide a level of support to the business on information security related queries, including engagement with department leads and Darktrace users to ensure secure operations throughout the business


• Support the management of security breaches and related incidents where there is security concern over personnel, assets or infrastructure


• Provide suitable resiliency and redundancy for other Security teams with department workflows (i.e., Security Compliance).


• Evaluate requests for exceptions to policies and security compliance queries, ensuring sufficient mitigating controls are in place


• Support the management and completion of customer security assessments and queries

Candidate Requirements:

• Broad knowledge of security threats, vulnerabilities, and controls gained through study, apprenticeship , or working experience.


• Good technical knowledge of the security impact on established and up and coming technologies. 


• Knowledge and understanding of regulatory/compliance requirements in information security. 


• Good stakeholder management skills, with an ability to understand and communicate technical details.

Benefits