Information Security Analyst
Posted 7 days ago by Howdens
Negotiable
Undetermined
Hybrid
Northampton, England, United Kingdom
Summary: Howdens is seeking an Information Security Analyst for a 6-month fixed-term contract to ensure PCI DSS certification and manage security incidents. The role involves working closely with third-party assessors and internal teams to maintain payment gateways and assess risks. The position requires onsite work two days a week at the Brackmills Business Park in Northamptonshire. The ideal candidate will have experience in technical operations security and a strong understanding of governance and compliance frameworks.
Key Responsibilities:
- Manage and deliver a plan to achieve PCI DSS certification for payment gateways.
- Work with third-party PCI DSS assessors to organize and scope assessments.
- Lead incident management investigations and coordinate remediation activities.
- Provide technical project support representing information security.
- Support the PMO to ensure security is assessed within projects and oversee supplier compliance.
- Conduct risk and vulnerability assessments to identify and mitigate security risks.
- Engage with IT projects to perform security reviews and communicate findings.
- Collaborate with external organizations to maintain the confidentiality, integrity, and availability of information.
Key Skills:
- Technical operations security experience with a focus on governance.
- Experience with PCI DSS certification in a large organization.
- Ability to assess system controls based on documented standards.
- Demonstrated problem analysis and resolution skills.
- Strong communication skills to influence best practices at all levels.
- Ability to build effective relationships and negotiate business outcomes.
- Experience presenting findings to senior stakeholders.
- Recognized Cyber Security qualification (CISA, CISMP, CISM or equivalent).
- Knowledge of industry-related frameworks such as ISO27001 and PCI DSS.
- Experience in presentation and training techniques in IT security is advantageous.
Salary (Rate): undetermined
City: Northampton
Country: United Kingdom
Working Arrangements: hybrid
IR35 Status: undetermined
Seniority Level: undetermined
Industry: IT
Howdens are looking for an Information Security Analyst to join us on a 6 months FTC. This InfoSec Analyst role will be to ensure that PCI DSS certifications is achieved and maintaining all appropriate payment gateways used by Howdens. The role will also play a key role in managing security incidents and in assessing risks and vulnerabilities identified. Our Cyber team are based from our office on Brackmills Business Park, Northamptonshire and you will be expected to work onsite 2 days per week.
What will I be doing as Information Security Analyst?
- Manage and deliver a plan to deliver PCI DSS certification to all appropriate payment gateways within Howdens.
- Work with 3rd party PCI DSS assessor, organise and scope the assessments
- Lead with incident management investigations and assist with the coordination of any remediation activities
- Provide technical project support representing information security
- Support the PMO (Project Management Office) to ensure appropriate security is assessed within projects alongside overseeing supplier compliance to Howdens needs for Cyber Security
- Conduct risk and vulnerability assessments to identify and mitigate security risks
- Engage with IT projects to perform Security Reviews and ensure findings are appropriately communicated and added to the appropriate logs to be managed
- Engage with external organisations working with Howdens to ensure the Confidentiality, Integrity and Availability of Howdens information is maintained
What We Need From You
- Technical Operations Security experience with a focus on governance
- Experience of PCI DSS certification and maintaining this with a large organisation
- Ability to assess system controls based on a documented standard
- Will be able to demonstrate ability in problem analysis and resolution
- Strong communication skills to be able to influence best practice at all levels of the organisation, with the ability to explain technical problems to non-technical business stakeholders at all levels
- Ability to build effective relationships to influence and negotiate business outcomes
- Experience of working with and presenting findings to Senior Stakeholders
- Hold recognised Cyber Security qualification (CISA, CISMP, CISM or equivalent).
- Knowledge of industry related frameworks such as ISO27001, PCI DSS
- Candidates with experience in presentation and training techniques in matters of IT security is advantageous as is anyone with familiarity in business continuity and crisis management activities
What We Can Offer You
- 6 months FTC
- Competitive salary and annual company bonus
- Excellent pension scheme (company matched up to 12%)
- 25 days holiday + bank holidays with the option to buy additional days
- Staff Discount
- Employee Assistance Programme
- Exceptional Reward and Recognition events
About Howdens
Howdens Joinery is the UK’s number one trade kitchen supplier providing thousands of products across kitchens, joinery, and hardware. We have over 900 depots throughout the UK and Europe – making us the first choice for more than 460,000 loyal trade professionals. Last year our sales reached circa 2.3bn, and we have an ambitious growth agenda. As well as the opportunity to develop within a fast paced and commercial environment, you will be part of a rewarding organisation recognised for excellence in the workplace in the Best Big Companies to Work For.