HCUK Information Security Assurance Analyst

The Information Security Assurance Analyst will maintain and improve the Information Security Management System (ISMS), including updating policies and coordinating reviews. They will facilitate supplier onboarding, conduct security assessments, and develop security awareness initiatives. Responsibilities include monitoring security alerts and incidents, preparing reports, scheduling penetration tests, and supporting remediation efforts. The analyst will also analyze external vulnerability bulletins, assist in evaluating cybersecurity tools, and use third-party assessment platforms. They will support project delivery, monitor control effectiveness, gather evidence for audits, and respond to audit findings. Additionally, the role involves building stakeholder relationships, collaborating with IT teams, producing security reports, documenting incidents with root cause analysis, and conducting information security risk assessments.