IT Security Analyst

IT Security Analyst - GRC Focused

Permanent - 45k-54k + strong benefits

Location: Hybrid - Southampton area

Your new company

I am looking to recruit a skilled IT Security Analyst to join a global leader in the trade/logistics space based in the heart of Southampton. You'll be working for a business that expedites and simplifies the import/export process through innovative technology solutions. Due to multiple recent acquisitions, the environment is ripe for integrations and digital transformation. This role will be hybrid, likely to be 3 days in the office a week, in Southampton, so you will need to be based within a commutable distance.

Your new role

This is an IT Security Analyst role that focusses more on the GRC and policies/procedures rather than being a SOC/Technical Security Analyst role. The client is looking for someone who is experienced with ISO27001 and someone who can own documentation and support the ISMS. It is likely that the role will grow and develop in the future. In the clients' words, key elements of the role include:

• ISMS Operation and Improvement: Support ISO27001 compliant ISMS.
• Policy Development: Create and maintain IT compliance policies and guidelines.
• Risk Management: Identify, assess, and mitigate IT risks; work with asset owners on remediation.
• Control Management: Support security controls like identity management, encryption, and network security.
• Asset Management: Monitor and manage assets, software, and licencing.
• Auditing & Monitoring: Lead IT audits, address findings, and participate in internal/external audits.
• Security Technologies: Oversee cyber security tools and ensure effective responses to alerts.
• Operational Security: Review security logs and alerts, identify issues, and implement remediations.
• Incident Response: Respond to IT compliance and security incidents, document actions, and learn from them.

What you'll need to succeed

• GRC skills and strong communication skills
• Strong understanding of risks associated with bad security processes.
• Experience working with an ISO 27001 ISMS.
• A solid understanding of the cyber security risks associated with various technologies and how to apply appropriate controls to mitigate these.
• Experience in risk assessment and management in the context of information security.
• CompTIA Security+ and ISO27001 certificates would be advantageous.

What you'll get in return

As well as a salary of up to 54000, there is also a company bonus scheme of up to 10%, BUPA healthcare, 25-28 holiday days + bank holidays, flexible working hours, free parking, 4x life assurance and company health cash plan. On top of this, they will fund courses/qualifications to improve your skill set, and you'll get access to their flexible benefits platform to select other benefits that suit your circumstances.

What you need to do now

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV.
If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)