Job description
About The Role
You will be joining a vibrant, exciting environment to mature the cyber security capabilities at Vitality. We are a values-based organisation, and our members are at the heart of everything we do.
- Respond to ad-hoc queries to the team mailbox; provide professional advice to Vitality business areas on Information Security best practice.
- Assist in the development, maintenance, and improvement of the Information Security Management System (ISMS), so that certification to ISO27001 is maintained.
- Mature the configuration of technical Security tools within Vitality; contribute to Information Security initiatives/projects.
- Assist in facilitating penetration tests; manage remediation of findings.
- Engagement with project managers to ensure risks are identified and are being addressed through the SDLC.
- Undertake security due diligence on third party suppliers including site visits as required. Participate in on-call cyber security incident response duties.
- Active monitoring of security systems and tools; respond to alerts from these and escalate where required; participate in the management of Information Security incidents.
- Contribute to the continuous improvement of Vitality’s Information Security posture; maintain up to date knowledge of latest threats and trends.
- Contribute to the development of information security training and awareness activities.
- Provide accurate reporting metrics as and when required.
- Minimum 2 years’ experience working in an Information Security role.
- Understanding of Information Security principles and frameworks, data protection and regulatory compliance, including ISO27001/FCA/PRA/ICO.
- Demonstrated ability to identify and implement process improvements.
- Excellent verbal and written communication skills; ability to articulate technical knowledge to non-technical audience.
- Experience of security monitoring and incident management.
- Experience of implementing/managing/reviewing Information Security technical controls e.g. Data Loss Prevention, Patching, RBAC, PAM, AV, DDoS mitigation, web proxy, Vulnerability Management.
About Us
Vitality is an award-winning, dynamic and vibrant financial services provider, with a ground-breaking vision for the future, where individuals are enabled to succeed and are rewarded and recognised for their contribution to our business. We’re the UK insurer and investment provider that rewards people for positive lifestyle choices – a key element of our Shared-value model. With 1.4m UK members and more than 25m globally, we’re out to make the world a healthier, happier place. This applies as much to our people as it does to our members.
Working for Vitality, you'll experience an exciting mix of creativity and innovation, within a framework of challenging objectives and a passion for delivering the best. We think work should be fun and sociable, and we want our people to get the most out of every day. Our people are chosen for their skills, knowledge, enthusiasm and attitude but above all, their belief that anything can be achieved. Wherever possible, we will consider a variety of working options to suit your lifestyle, whether that be hybrid home/office working, flexible working and part or full time employment. It’s what we call offering shared values, because a healthy happy team is good for us, good for our members and good for you.
If you have any questions, please contact: [email protected].