Senior Information Security Analyst

Job Introduction

***Remote/home working with occasional visits to our London office***

Our people are everything to us. The way they deliver exceptional experiences every day for our customers, for their colleagues. The way they own what they do. Their 'Why's it like that?' curiosity. How they always think of others and work together to get things done. Come and do the best work of your life alongside lovely colleagues. Come to Saga! 

And right now, we are looking for a Senior Information Security Analyst to join the Technology unit at Saga. You will be working within the Information Security team alongside other technical analysts. You will be monitoring, testing, and working towards continuous improvement of cyber security controls to deliver Saga’s Cyber Security Strategy to help manage cyber risk.

Reporting into the Information Security Manager, you will be actively identifying inefficiencies and championing the adoption of new controls, technologies, and approaches to meet business needs and manage risk. You will be responsible of providing advice and guidance on how to minimise the impact of threats to assets and services. You will also be continuously identifying opportunities to improve technical cyber risk management controls.

And in return, you can look forward to all the responsibility and involvement of an integral role, providing you with a rewarding and fast-paced career with an excellent benefits package.    

If this is of interest to you then we would be keen to hear from you!

Role Responsibility

As Senior Information Security Analyst your responsibilities will be: 

• Helping to shape and support the delivery of the Cyber Strategic plan and policies, including the definition, evolution, and management of security controls against defined performance KPIs.
• Providing subject matter expertise for development teams in secure application development and remediation of security test findings.

• Providing cyber consultancy as required to support the business and its initiatives.
• Providing delivery and assurance monitoring of internal and third-party cyber risk mitigation controls to meet Risk Appetite.
• Using technical knowledge and expertise to deliver solutions to meet policies and processes.
• Leading incident response activities, including containment, eradication, and recovery to minimize the impact of security incidents and ensure business continuity. 
• Maintaining external relationships and partnerships to stay up to date with the latest security trends, threats, vulnerabilities, and technologies, and provide guidance on emerging risks and mitigation strategies.
• Mentoring and providing guidance to junior security analysts and assisting in developing their technical skills and knowledge. 

The Ideal Candidate

• Extensive technical experience of working in an SOC environment. Any industry certifications will be beneficial.
• Strong technical expertise in security technologies and practices, including firewalls, intrusion detection/prevention systems, SIEM tools, encryption mechanisms, authentication solutions, and vulnerability scanning tools. 
• Strong understanding of vulnerability testing frameworks / techniques and experience in configuring and managing vulnerability management platforms and network scanning software.
• Good knowledge of networking principles, OSI model, routing, subnetting, common ports and firewalls etc.
• Familiarity with regulatory requirements, such as GDPR, HIPAA or PCI DSS and industry standards and best practices, such as ISO 27001/27002, Mitre ATT&CK/D3FEND, NIST Cybersecurity Framework, and OWASP.
• Experience with securing and monitoring of public cloud environments such as MS Azure, AWS, OCI and GCP, and good working knowledge of identity and access management platforms, such as AASS and AAD.
• Strong practical knowledge of Windows and Linux based OS’s, and understanding of security hardening standards, such as CIS and its implementation
• Excellent communication and interpersonal skills, with the ability to effectively convey complex security concepts to technical and non-technical stakeholders.
• Demonstrated ability to work independently and as part of a team, with a high level of initiative and self-motivation.
• Strong attention to detail and organisational skills, with the ability to manage multiple priorities and meet deadlines.

Our Saga Values:

• Precision Pace - Always owning and making things happen. 
• Empathy – Always aware of others. 
• Curiosity – Always asking why.
• Collaboration – Always one team, the Saga team!

Package Description

The standard benefits when you join Saga include: 

• Remote working available where possible

• 25 days annual leave plus bank holidays with the choice to buy a further 5 days annual leave per year 

• Free private medical insurance after 1 years' service 

• Workplace Pension 

• AXA Be Supported 

• A range of reductions and offers from leading retailers, travel groups and entertainment companies

About the Company

Over the past 70 years we have become the UK's specialist provider of products and services to people aged over 50 in the UK. The Saga brand has become one of the most recognised and trusted brands amongst UK consumers in this demographic, recognised for its high quality products and exceptional standards of service. These include cruises and holidays, insurance, personal finance and the Saga Magazine.

At Saga we are committed to treating all employees fairly and to offering equal opportunities in all aspects of employment and advancement. We value diversity not just because it is the right thing to do, but because diverse teams perform better.

Fair consideration is given to applications from all applicants, including those with disabilities and those over who are over 50 as we are champions of age inclusivity. We are an official Disability Confident employer and ensure that our recruitment process is inclusive and accessible and we will make reasonable adjustments as required. For more information on our DEI policies please visit our Saga Careers page.

​Saga does not accept agency CVs unless specifically engaged on the role by the Talent Acquisition Team. Please do not forward CVs to our recruiters, employees or any other company location. Saga will not be responsible for any fees related to CVs received in this unsolicited manner.

#LI-Remote”

Saga Group