Information Security and Compliance Analyst

Summary 

Reporting to the Information Security and Compliance Director, the Information Security and Compliance Analyst will act as a technical expert in supporting the day-to-day activities of the department in order to maintain the confidentiality, integrity and availability of the organization’s information assets, monitoring actioning and reporting on security-related events.  Reporting on the status of information security and compliance across the business.  The role would suit a career driven individual with a passion to develop their own skills and knowledge in security for this challenging but highly rewarding position. 

About Smart Communications 

Smart Communications is a leading technology company focused on helping businesses engage in more meaningful customer conversations. Its Conversation Cloud™ platform uniquely delivers personalized, omnichannel conversations across the entire customer experience, empowering companies to succeed in today’s digital-focused, customer-driven world while also simplifying processes and operating more efficiently. Smart Communications is headquartered in the UK and serves more than 650 customers from offices located across North America, Europe, and Asia Pacific. Smart Communications’ Conversation Cloud platform includes the enterprise-scale customer communications management (CCM) power of SmartCOMMTM, forms transformation capabilities made possible by SmartIQTM and the trade documentation expertise of SmartDXTM. In 2021, the company acquired Assentis, a leading European software solutions provider specializing in customer communications management (CCM) with a focus on the financial services industry. To learn more, visit smartcommunications.com. 

Who are you? 

Have a keen interest in the compliance/information security field.  You have a background in information technology.  Confident working with internal stakeholders is essential to make sure the organization is compliant with PCI DSS, ISO/IEC 27001 and SOC controls.  You thrive in searching for solutions to technical security issues. 

The responsibilities of the role include: 

• Supporting global time zones (UK, US, AUS) and being on an on-call schedule 
• Monitoring, actioning and reporting on security-related events from SIEM’s (Alert Logic, SecureWorks, Azure Security Center) 
• Tracking and remediating information security vulnerabilities 

• Reporting on the status of information security and compliance across the business 
• Supporting the team in compliance and information security activities, such as document management, risk management and certification requirements 
• Completion of security questionnaires/RFP’s 

What we’re looking for: 

Must have skills/experience: 

• Security certification (CISSP) 
• Strong understanding of SIEM’s (Azure Security Center, Alert Logic, SecureWorks), AWS and Azure environments 
• Strong understanding of networking and network security 

• Knowledge of Unix/Linux and Windows environments 

Knowledge of security tools (Qualys) 

Advantageous skills/experience: 

• Threat intelligence experience 

• Experience with frameworks such as ITIL, COBIT 5 

We look for the following core competencies in everyone we hire at Smart Communications: 

• Analytical Ability – effectiveness in analysing situations and identifying key issues.  
• Planning and execution – monitor