Vitality, IT and Security Risk Analyst, London, £Competitive + Bonus + Benefits.
Vitality is an award winning, dynamic and vibrant financial services provider, with a ground-breaking vision for the future, where individuals are enabled to succeed and are rewarded and recognised for their contribution to our business.
Our IT and Security Risk Analyst will receive a competitive salary plus benefits including;
- Bonus
- A genuine long-term opportunity to grow and establish a long-term career.
- Our award winning private medical insurance.
- A comprehensive flexible benefits scheme.
- Stakeholder Pension Plan with employer contribution.
- Vitality Partners and Rewards
As our IT and Security Risk Analyst you will support the Head of Operational Risk and CRO in the delivery of the Risk Framework by providing 2nd Line administration of the IT risk reporting process for Vitality.
You will provide facilitation and an independent assessment of the systems and controls in place to manage IT Governance and Information Security risk, and work with the business to develop and improve Risk Culture in the Organisation. Focus on the delivery of clear, concise, complete and timely risk reporting, on a day to day basis and for scheduled risk and governance committees.
Responsibilities as our IT and Security Risk Analyst include:
- Promote and embed best practice in managing IT and Information Security risk, and the impact that this will have on business activity and processes.
- Work with IT Risk Champions and IT Risk Owners to ensure issues and threats facing the organisation are identified, assessed and mitigated.
- Ensure processes are in place to facilitate the recording of IT risks and incidents and their assessments.
- Support the monitoring and reporting of IT and Cyber risk appetite for Vitality, through the development and maintenance of Key Risk Indicators.
- Conduct IT Risk Assessments for Business and Technology Services.
- Monitoring and assessment of the Systems and Controls in place in relation to the policies classified under the ERM Framework and Policy.
- Implementation and ongoing administrative support of the Enterprise Risk Management System.
- Provides second line oversight for :
- Development and Management of the IT Systems of the business.
- Operational and services areas of the business.
- Change programs
- Third Party Outsourcing
Skills and experience required of our IT and Security Risk Analyst:
Essential
- Information Security Risk management experience in a multinational organisation.
- experience and understanding in monitoring of Digital Web platforms for Information Security Risks.
- experience of working with front line business units in implementing and enhancing risk management frameworks through risk and control assessment workshops.
- experience of Risk Incident Management processes and root cause analysis.
- experience of delivering change and transformation in an information security risk management context.
CISSP or similar
- Familiarity with PRAs and FCAs requirements for financial institutions.
- Well versed with IT and Information Security Frameworks like ISO27001/2, Nist, Cobit, ITIL.

Desirable
- Programme and/or project management, technical knowledge and experience.
- Business understanding of:
- Identity and Access Management System
- Security Incident and Event Mgt. System.
- experience in presenting basic risk management training in to the first line.

Soft Skills
- Effective negotiation/influencing skills and strong communicator at multiple levels.
- Used to working with and influencing senior management, builds strong relationships.
- Skilled in writing concise, accurate and objective reports.
- Strong organisational skills, able to prioritise.
- Used to analysing complex data or situations and presenting them ion a clear and concise manner.

Attributes
- Professionally minded, constructive, business and goal orientated.
- Resilient, calm, objective, capable of working effectively under pressure and/or in conflict situations.
- Adaptability; Maintains effectiveness when experiencing major changes in personal work tasks or the work environment; adjusting effectively to work within new work structures, processes, requirements or cultures.
Working for Vitality as a IT and Security Risk Analyst you'll experience an exciting mix of creativity and innovation, within a framework of challenging objectives and a passion for delivering the best.
Our people are chosen for their skills, knowledge, enthusiasm and attitude but above all, their belief that anything can be achieved.
Closing Date: Friday 20th July 2022
If you feel you have the skills and experience to become our IT and Security Risk Analyst please click ‘apply’ today.