Information Security Specialist

The Department
The LifeRTC Information Security Team, led by the Head of Information Security, is dedicated to protecting the practice’s digital and physical assets, as well as its global software and products. The team, consisting of cybersecurity analysts and on-premises security specialists, ensures information confidentiality, integrity, and availability by aligning security strategies with business objectives and complying with laws and industry standards.

Acting as the incident response team, they focus on threat intelligence, incident management, vulnerability assessments, access control, and security awareness training. They use advanced technologies like firewalls and System Information Event Monitoring systems to counter security threats and work closely with other departments to maintain a comprehensive security approach. Through these efforts, the team plays a critical role in mitigating risks and ensuring a secure operating environment.

The Role
The Information Security Specialist, is a critical member of our Information Security team, reporting directly to the Head of Information Security. This is a technical role, focusing on implementing and managing solutions to assist our various teams across the practice helping increase our security posture and reduce our overall risk.

This role is expected to leverage their technical expertise to enhance our security posture, manage risks, and contribute to the overall information security strategy.

Your Responsibilities:

• Act as an escalation point for IT Security Analysts.
• Implement and manage technical security solutions within our Azure infrastructure and security monitoring systems.
• Identify areas where automation can help us become more efficient and implement automation to streamline processes and the efficiency of the security team.
• Collaborate with internal teams to ensure acceptable control and risk levels are maintained throughout the organization.
• Be responsible for answering security questionnaires from clients on behalf of the practice.
• Act as an integral part of the Incident Response team during security incidents, providing technical expertise and support.
• Contribute to the ongoing information security program, addressing all aspects of security from on-premises to cloud (Azure) and web application security.
• Responsible for answering security questionnaires on behalf of the practice and help us to solve the problem of how this process can be made more efficient.
• Participate in the system hardening and vulnerability management programs, providing direction to key business areas on their focus points.
• Participate in evidence gathering for the SOC audit process when required.
• Stay abreast of industry trends and advancements in security and cybersecurity technologies, ensuring our practices are up-to-date and effective.
• Form part of the Incident Response team.

Job Knowledge, Experience Skills
Job Knowledge Required:

• Minimum 4 years’ experience working in a Security focused role.
• Strong technical Azure experience required with a focus on security systems including Defender for Cloud and Azure Sentinel
• Demonstratable experience automating security processes.
• Qualifications:
  • Any Azure SC-/AZ- above foundation level (900) would be advantageous
  • CCSP
• This role requires a hands-on approach to all aspects of security, from on-premises to Microsoft Azure. The Information Security Specialist should have a deep understanding of information security principles and a strong technical background in cloud and on-premises systems.

Experience and Soft Skills Required:

• Passion for IT security and keeping up to date with industry trends
• Communicate effectively to both technical and non-technical audiences
• Ability to be adept at defining and building solutions from business requirements
• Ability to work in a fast-paced environment across multiple time zones
• Excellent written and verbal communications skills
• Ability to build and nurture relationships with stakeholders
• Demonstrate aptitude for, and willingness to, learn, and an appetite for continuous education

Additional Knowledge and Skills to Build:

• Ability to discuss complex security issues in understandable terms
• Organize and lead internal calls and meetings
• Demonstrate excellent people skills with the ability to ask questions to pinpoint specific concerns
• Produce high quality work that demonstrates subject matter expert knowledge
• Build, develop and grow relationships with teams internal to the practice and the wider Milliman community
• Function as a mentor for jun