Information Security Analyst

Trilateral Research have a fantastic opportunity for an Information Security Analyst who will be responsible for the operational management, support, maintenance and implementation of all information security policies and procedures for the organisation, both technical and policy-driven.

The preferred candidate must have hands-on experience with security technologies and solutions, have experience performing daily investigations of security incidents, security assessments and audits, have at least 2 years’ experience in cybersecurity, and will be currently serving in a similar position.

They will also have expertise in identity and access management, document management solutions (e.g., SharePoint) and endpoint management solutions, and will preferably have experience with penetration testing and vulnerability assessments.

Our company and what we do

At Trilateral Research we provide ethical AI solutions for tackling complex social issues, from human trafficking and child exploitation, citizen security in crisis to pollution and climate change. We transform research into innovation and sustainable impact​, focusing our efforts where we can enhance societal wellbeing.

We apply rigorous, cutting-edge research when developing and accessing new technologies to ensure they achieve sustainable innovation and measurable impact. Our teams include humanities specialists, social scientists, data scientists, ethical, legal and human rights experts who work across the technology-social disciplinary divide.

What are your responsibilities?

• Working with stakeholders to identify information security gaps across the organisation
• Evaluating and proposing appropriate software where required to support the company’s IS stance and implementing against planned timescales and budgets
• Prioritising requirements with the assistance of the IS board.
• Working with outsourced IT helpdesk to ensure that all technical requirements are delivered in a timely fashion
• Collaborate with technical teams to deliver secure, stable and scalable solutions for product growth
• Evolving and monitoring the Information Security Management System to secure our information system estate.
• Identifying vulnerabilities within our network infrastructure
• Performing vulnerability scanning and penetration testing to identity flaws
• Ensure that organisational assets, including staff devices are protected against security threats.
• Documenting any security breaches and assessing remedial actions
• Assisting with investigations into any incidents or breaches and supporting with any associated legal and or disciplinary matters
• Collaborating with the IS Management Board and ICT support infrastructure to improve security and risk management within the company
• Contributing to and implementing a business-aligned company Information and Cyber Security operating model
• Identifying relevant IS standards to complement the business strategy
• Creating and implementing plans to secure relevant certifications, e.g. Cyber Essentials Plus, Cyber Assured, ISO/IEC:27001 including gap analysis, control selection actions and project management of audits
• Working with external experts to ensure we are aligning our practices correctly with the relevant frameworks and following best practice at all times
• Educating colleagues through training interventions about company practice and best practice across the IS framework, throughout the employee life cycle
• Keeping up to date with IT Security threats and providing advice and guidance to the business as required.
• Develop appropriate metrics that are designed and utilised to ensure the IS function is meeting business needs as well as the highest standards of quality, legal and regulatory compliance and corporate governance

Requirements

What skills and experience you will bring to the role:

Interpersonal Skills:

• Strong verbal and written communication and presentation skills, including an ability to effectively communicate with stakeholders across the organisation.
• Excellent problem-solving and analytical skills.
• Ability to educate a non-technical audience about various security measures.
• Strong relationship-building and influencing skills
• Strong organisational skills

General Knowledge and Technical Skills:

Essential:

• Project management experience or training
• Good analytical skills and data driven thinking
• Excell