Junior Security Analyst (Basingstoke)

Department Overview:

The IT Security team at InfoSum protects the company’s digital assets by ensuring data confidentiality, integrity, and availability. They proactively manage risks, monitor threats, and respond to incidents while maintaining compliance with industry standards. Collaborating across teams, they integrate security best practices into all operations, ensuring InfoSum remains a trusted and secure partner.

Job Overview:

As a Junior Security Analyst at InfoSum, you will assist in safeguarding the organization’s information by supporting various security initiatives and ensuring compliance with relevant standards, regulations, and best practices. This role offers an excellent opportunity for an individual eager to gain experience in information security while contributing to the protection of company data and assets.

Core Responsibilities:

• Security Monitoring: Assist in monitoring systems for security threats and vulnerabilities. Track security incidents and provide timely reporting to the security team.

• Risk Assessment Support: Support risk assessments by collecting data, identifying potential risks, and assisting with the development of risk mitigation strategies.

• Compliance Assistance: Help ensure compliance with industry standards and regulations such as ISO 27001, NIST, and GDPR by assisting in the creation, implementation, and upkeep of security policies and controls.

• Audit Support: Assist in coordinating and supporting internal and external security audits. Respond to audit findings and help with corrective actions to ensure compliance.

• Incident Response Assistance: Support the incident response process by documenting security incidents and analyzing causes to help prevent future issues.

• Security Awareness Support: Help organize and implement security training programs to educate employees about security risks and best practices.

• Vendor Risk Management: Assist in assessing third-party vendors' security practices and ensuring they align with the organization's standards.

• Security Documentation: Maintain accurate records of security activities, policies, and procedures to support governance and reporting requirements.

Additional company wide requirements

• Understand and comply with InfoSum’s security and privacy policies, maintaining a focus on information security in all tasks performed.

The main skills needed to deliver the core responsibilities:

• 1-2 years of experience in information security, IT, or a related field.

• Understanding of information security frameworks and standards such as ISO 27001, NIST, and GDPR.

• Basic knowledge of risk management and vulnerability assessment.

• Strong analytical and problem-solving skills.

• Good communication skills, with the ability to work collaboratively in cross-functional teams.

• Strong attention to detail and organizational skills.

• Familiarity with security monitoring tools and incident response practices is a plus.

• Proficiency in Microsoft Office and other productivity tools.

What are the key indicators of success in this role?

• Effective monitoring and reporting of security incidents.

• Timely and accurate risk assessments and mitigation support.

• Successful audit preparation and compliance adherence.

• Active participation in incident response activities and resolution.

• Improvement in security awareness within the organization.

• Efficient support of vendor risk management initiatives.

• Ongoing collaboration with internal teams to strengthen overall security posture.

#LI-Hybrid