Information Security Analyst

WHSmith

JOB OVERVIEW

Job Purpose

We are now looking for an Information Security Analyst to join our Info Sec team. The Security Analyst (Governance) is accountable for the operational and process assurance activities related to the availability, integrity and confidentiality of customer, business partner, employee and business information in compliance with the organisation’s information security policies.

This role can be based from either our London office or our Swindon office. We adapt a hybrid working model which includes working from home and in the office.

Main Responsibilities

• Maintain information security policies, processes and standards in coordination with internal security and business stakeholders
• Manage and maintain the Information & Data Security Roadmap, incident and information requests
• Work directly with business partners to facilitate risk assessment and management, assessing and communicating in line with relative policies and processes
• Facilitate delivery of the information and data security education and awareness training framework across the business to ensure consistent application of policies and standards
• Manage and schedule WH Smith daily, weekly, monthly, quarterly and annual information security tasks.
• Maintain technical solutions and procedural controls required to manage information security risk in line with the organisation’s Information Security Policies
• Facilitate regular quarterly access control, asset inventory reviews and remediation plans, in line with the Access control Policy and Asset Management Policy
• Partner with ALL WH Smith Technology groups, (internal and external), as the Data Security representative on development projects to deliver secure & compliant Security Operational Services
• Manage and Partner with WH Smith 3rd Party Suppliers, (service, software and infrastructure), to establish a mutually beneficial ‘security council’ and to ensure WH Smith security requirements are met
• Facilitate collation of documentary evidence in support of annual PCI DSS and Privacy Impact Assessments (DPIA)
• Monitor and React to global and national intelligence security information from various external sources (e.g. NCSC Early Warning Reports, McAfee, PaoloAlto and MS365 reports etc.)
• Co-ordinate and administrate the WH Smith PCI DSS Steering Group and Cyber Committee meetings.
• Agree and deliver the WH Smith Information Security reports and schedule to support communication, education, security status and plans.

Key Skills Required

• Experience in a combination of risk management, information security and IT roles (including Audit)
• Knowledge gained through working with common information security management frameworks (eg. ISO27001, Cyber Essentials, NIST, PCI DSS, SOC2)
• A strong knowledge of Office 365, Teams and SharePoint
• Knowledge of Data Protection regulations and requirements
• Experience of managing third party suppliers
• Experience of PCI-DSS controls and implementation
• Experience in Data Protection and Data Privacy security
• Experience in managing the expectations, needs and perspectives of a team and all stakeholders
• Experience of working in a multi-site organisation

Why Join Us?

You’ll be at of the hub of an incredibly fast-moving function, and you’ll be trusted to make decisions that benefit the business. It’s a serious responsibility – which will seriously motivate you. You’ll thrive on the freedom and the chance to use your skills and will be supported with plenty of training and development opportunities.

What’s more, you can expect some fab rewards. Just look at our benefits below! Our London Head Office is only a five minute walk from Liverpool Street Station and close to lots of shops, bars and restaurants.

Benefits

• Cash / Car Allowance
• Annual bonus based on company performance
• Hybrid working model which includes working from home and in the office
• 25 days holiday, plus your Birthday off, plus Bank Holidays, with an opportunity to buy extra holiday
• Finish at 4pm on a Friday
• Competitive pension contribution
• Staff discount card for stores and online

About Us

WHSmith is a leading global travel retailer with a smaller business located on UK high streets. Since 1792, we’ve grown and evolved into a globally recognised brand, and we’re proud to be that air of familiarity people love and trust on their journey, both in life and through life. Today, we have more than 1700 stores in over 30 countries across the globe, serving millions of customers every year, and you’ll find us at airports, railway stations, hospitals and on the high street.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, colour, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, and basis of disability. When we collect your personal information as part of a job application or offer of employment, we do so in accordance with industry standards and best practices and in compliance with applicable privacy laws.

We welcome applications from people of all backgrounds and encourage them from individuals from under-represented groups at WHSmith. This includes women and people from Black, Asian and minority ethnic groups.