Information Security Analyst - GRC

We are looking for an Information Security Analyst to join our Security team and focus on Governance, Risk, and Compliance.

This role offers an InfoSec Analyst the opportunity to represent information security, interpret technical design, and apply information security best practices.

This is a permanent position based at our office in Brackmills Business Park, Northamptonshire. You will work onsite at least 3 days per week with 2 days from home.

What will I be doing as Information Security Analyst?

1. Assist in establishing and monitoring the corporate information security policy, standards, procedures, guidelines, internal controls, and business continuity to ensure Howdens Business Information is protected, in alignment with Cyber Security best practices and data protection regulations.
2. Provide technical project support representing information security.
3. Play an active role in incident management activities.
4. Support the PMO (Project Management Office) to ensure appropriate security is assessed within projects alongside overseeing supplier compliance to Howdens needs for Cyber Security.
5. Lead incident management investigations and conduct risk and vulnerability assessments where appropriate.
6. Conduct risk and vulnerability assessments to identify and mitigate security risks.
7. Engage with IT projects to perform Security Reviews and ensure findings are appropriately communicated and added to the appropriate logs to be managed.
8. Engage with external organizations working with Howdens to ensure the Confidentiality, Integrity, and Availability of Howdens information is maintained.

Key skills and experience required:

1. Technical Operations Security experience with an interest to work within a governance role or experience working in a Security Governance role.
2. Ability to assess system controls based on a documented standard.
3. Demonstrated ability in problem analysis and resolution.
4. Strong communication skills to influence best practices at all levels of the organization, with the ability to explain technical problems to non-technical business stakeholders.
5. Ability to build effective relationships to influence and negotiate business outcomes.
6. Experience of working with and presenting findings to Senior Stakeholders.
7. Hold a recognized Cyber Security qualification (CISA, CISMP, CISM, or equivalent).
8. Knowledge of industry-related frameworks such as ISO27001, PCI DSS.
9. Experience in presentation and training techniques in matters of IT security is advantageous, as is familiarity with business continuity and crisis management activities.

What we can offer you:

1. Competitive salary and annual company bonus.
2. Excellent pension scheme (company contribution of up to 12%).
3. 25 days holiday + bank holidays with the option to buy additional days.
4. Staff Discount.
5. Employee Assistance Programme.
6. Exceptional Reward and Recognition events.

About Howdens:

Howdens Joinery is the UK’s number one trade kitchen supplier providing thousands of products across kitchens, joinery, and hardware. We have over 900 depots throughout the UK and Europe – making us the first choice for more than 460,000 loyal trade professionals. Last year our sales reached circa 2.3bn, and we have an ambitious growth agenda.

As well as the opportunity to develop within a fast-paced and commercial environment, you will be part of a rewarding organization recognized for excellence in the workplace in the Best Big Companies to Work For.

How to apply

We’re building a future where world-class service, innovation, and sustainability are embedded within our DNA. If Howdens sounds like the kind of place where you can build and develop your career, then we’re keen to hear from you.

Howdens is founded on the principle of being Worthwhile for ALL concerned. We’re working hard to ensure we provide an inclusive environment where everyone feels welcome. We will do everything we can to support you during your application. If you need us to make any adjustments to our recruitment process, please email (url removed) with the job title and location, and we will be happy to help you.