---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Information Assurance Analyst
Location: London, , United Kingdom
Type: Permanent F/T
Closing Date: 2008-03-20
Reference No. SF-272
Company Global Financial Organisation
Location London
Salary £30,000
Package Benefits package
Start Date ASAP
No. Required 1
Reports To Senior Information Security Administrator
The Role
The role has 5 key objectives which will be rotated among security
administration staff:
Helpdesk
Operation and administration of security and logical access control processes.
Security event management
Security Risk Assessment
Continuous Process Improvement
Helpdesk. Coordinate with peers to provide an effective telephone helpdesk
facility with operational cover at the required service level
• Monitor and manage all calls / emails logged to Logical Access Control
and ensure they are being actioned effectively in accordance with defined
process.
• Resolution is to be documented adequately and archived
• Maintain effective ownership of problems to conclusion.
• Assess all problems and potential security issues and escalate to
management.
• Ensure that there is telephone and email cover for the team’s
security administration functions at all times.
Operation and administration of security and logical access control processes.
These ensure effective security of the applications involved in Investment
Management and Business Operations.
• Design, implement and maintain Information Security processes and their
lifecycle.
• Maintain full audit trail of process administration and operation in
accordance with the Information Security Policy.
• Security administration of Linux, Unix and Wintel platform and the
operational application suite.
• Account administration using the joiner/leaver process
• Process requests within stated service level, reporting any uncompleted
tasks at the end of the business day to management.
• Check user access updates to audit reports on a daily basis
• Perform testing of security administration aspects of new system
releases and enhancements.
Security event management. Security monitoring, configuration and
administration of the operational environment using the products and their
defined processes in order to meet defined service levels and operational
integrity.
• Develop, maintain and operate information security monitoring.
• Implement automated monitoring policies and rules in line with security
policies and standards.
• Identify security alerts and potential security issues through the
monitoring and control system.
• Investigate, escalate and resolve identified security issues and
alerts, in accordance with risk and priority.
• Refine and implement monitoring and control security policies and rules.
• Generate and review regular and adhoc reports and investigate, escalate
and resolve identified issues.
• Liaison with IT and business managers as appropriate.
• Third-party supplier liaison for support of the monitoring and control
system.
Security Risk Assessment: Complete security risk assessment in accordance with
the defined standard in adherence to the Information Security Policy.
• Evaluate planned new applications to ensure that they comply with the
Information Security policy and security administration requirements as
required. Raise any issues to the Head of Information Security.
• Development and maintenance of information security policies and
standards, processes and procedures.
• Conduct of risk assessments and provision of practical advice and
guidance on management, procedural and technical security controls.
Continuous Process Improvement. Maintain, enhance and disseminate operational
procedures, processes in accordance with Business, IT and Audit objectives to
ensure effective and regulatory compliant business operation
• Develop and review current working practices, policies, procedures and
standards in light of customer demand, regulatory requirements
JOB REQUIREMENTS
---------------------------------------------------
Please note that in order to apply for any vacancy in the UK, you will need
either a valid EC Passport or valid Work Permit enabling you to work in the UK.
CONTACT
---------------------------------------------------
Information Security Solutions
Iain Sutherland
iain@InformationSecuritySolutions.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
