Information Security Analyst

Job Description

Job Title:

Information Security Analyst
Work Arrangement:

Hybrid ( 2 to 3 days)
Location:

RBC Europe Limited, 100 Bishopsgate, London, EC2N 4AA
Rate Payable to Contractors:

£350 - £400 per day
Duration of Assignment:

6 months

Role Description:
The Information Security Analyst role at RBC BlueBay Asset Management involves providing expert advice and support on Information Security. The role includes system access reviews, security monitoring, compliance checks, and contributing to the security improvement program. The goal is to enhance security and ensure a safe and sound environment through pragmatic risk-based analysis.

Key Responsibilities:

Information Security Systems Review and Monitoring:
Coordinate and manage user access and access rights review cycles for BlueBay systems.
Maintain and improve security monitoring, including:
Compliance with security standards.
Monitoring vulnerabilities.
Compliance with the patching process.
Monitoring security systems (IDS, Firewall, Anti-Virus) and event logs.
Reporting IT KRIs/KPIs.
Conduct periodic internal penetration testing and vulnerability assessments.
Report status and exceptions to the Information Security Officer.

Standard and Procedure Management:
Ensure security procedures are met and followed.
Document standard and security procedures for BAU tasks on the internal SharePoint site.
Support and challenge third-party risk assessments.
Manage information security change processes.

Information Security Improvement Programme:
Support IT governance software systems.
Provide technical expertise in security controls for IT infrastructure, applications, and projects.
Participate in or lead aspects of the security improvement program, including risk assessments and controls testing.
Track and address action items from the security improvement program.
Prepare and document meetings related to security improvement.

Information Security Services Exemptions:
Consult with IT to identify and assist with IS exemptions.
Minimize exemptions and explore alternative solutions before filing.
Review and maintain a record of IS exemptions.

Information Security Incident Management:
Assist in responding to auditor, vendor, or client questions.
Participate in or lead investigations of security breaches.
Facilitate investigations of security incidents, such as fraud or policy breaches.
Ensure comprehensive incident tracking and reporting.

Key

Skills/Knowledge/Experience:
Strong technical knowledge of IT infrastructure systems (Windows, VMware, SQL, Exchange, Azure, O365).
Specialist knowledge of Firewall (Cisco), IDS, and log monitoring software.
Understanding of ITIL practices, ISO 27001 standards.
(Preferred) Knowledge of EDR software, privileged access management, penetration and vulnerability tools, Change Auditor, ServiceNow.
Ability to understand business processes and work effectively in cross-functional teams.
Degree in Technology.
3-5 years of experience in IT Security Operations or IT Infrastructure Support.
Experience in developing and monitoring IT infrastructure system standards.
Experience in firewall/IDS monitoring.
(Preferred) Certifications: CISM, CISSP, CEH.
(Preferred) Experience in penetration and vulnerability testing.
(Optional) Experience in patch monitoring.