Associate Security Analyst Job in Dunnhumby

Key accountabilities:

Maintain the Repository of Responses by developing and managing the review schedule for the various controls within the Repository

Collaborate with the various Legal, Client, Technology and Security teams to obtain information and evidence in response to requests for information and audits

Ensure that evidence is catalogued and captured within the repository where appropriate

Collaborate with colleagues in Security Operations and Threat Intelligence teams to support any security incidents and inquiries originating from or affecting clients

Coordinating and tracking remediation of identified control gaps and audit findings

Contributing to the identification and development of improvements to the client assurance and audit processes.

Assisting with the development and generation of performance metrics against SLAs

Qualifications & Experience

Desirable

Strong knowledge of various security frameworks (NIST, ISO27001)

Strong reporting ability, with an understanding on how to tailor reports to different audiences

Experience working as part of an audit team

Professional certification, such as CISSP, CISA, CISM, ISO27001, etc Essential BSc in any field as well as 2+ years of relevant experience within GRC (or 5+ years of experience without BSc)

Strong attention to detail and methodical approach to working

Strong ability to take initiative and self-organise

All-rounder knowledge of information security controls and processes

Proven track recording in stakeholder management

Customer / client facing roles and experience