Information Security Analyst

VCCP is the global challenger network for challenger brands. With more than 1500 people across 13 offices in North America EMEA and APAC we challenge convention to create value for the worlds most ambitious organisations.

Our founding belief is It Only Works If It All Works. Thats why we bring specialists from every discipline - strategy AI data media digital experience branding creativity production PR CX CRM employee engagement and beyond - into one fully integrated challenger network.

We were founded on the principles of simplicity collaboration and un-preciousness and weve grown by staying true to them. Today our clients include some of the worlds most recognisable and progressive brands such as Virgin Media O2 Barclays Cadbury Compare the Market Dominos White Claw easyJet Primark and Co-op.

VCCP has topped the AARs annual new business ranking in 13 of the last 14 years and holds multiple Agency of the Year titles. Across every company and every capability we share the same ambition: to challenge ourselves challenge our clients and challenge the industry for the better.

THE ROLE

We are seeking a highly motivated and experienced Information Security Analyst to join our growing IT team. This role is crucial in maintaining and enhancing our security posture protecting our valuable data assets and ensuring compliance with industry best practices and certifications. The ideal candidate will have a strong foundation in IT security principles and practical experience in a variety of security domains. You will be a key player in identifying and mitigating risks responding to security incidents and driving continuous improvement in our security controls.

Responsibilities:

• Varonis Platform Expertise: Customise and leverage the Varonis platform to generate insightful reports and dashboards providing high-value intelligence on data access and usage patterns.
• Endpoint Detection and Response (EDR) and SIEM Management: Own and manage our Falcon Crowdstrike EDR and SIEM solutions. This includes monitoring analyzing alerts investigating security incidents and driving remediation efforts.
• Google Workspace Security: Analyse security events using Google Admin Auditing capabilities. Develop and implement solutions to enhance Gmail security effectively reducing spam and phishing incidents.
• Security Awareness Training: Plan and execute quarterly phishing campaigns to educate employees and reinforce security best practices.
• Vulnerability Management: Conduct regular asset scanning and vulnerability assessments prioritizing and remediating identified weaknesses.
• Compliance and Certifications: Take a leading role in maintaining ISO27001 and Cyber Essentials certifications. Develop a comprehensive plan to achieve Cyber Essentials Plus certification and lead all associated audits.
• Security Questionnaires: Assist in the timely and accurate completion of security questionnaires for clients and partners.
• Policy Management: Assist in maintaining and updating IT and security policies ensuring they remain relevant and effective.
• Business Continuity Planning (BCP): Assist in testing and refining our Business Continuity Plan to ensure organisational resilience.
• Infrastructure Security Collaboration: Work closely with the Infrastructure team to enhance existing security processes and develop best practices encompassing all infrastructure components to minimise exploitable vulnerabilities.
• Security Dashboard Development: Contribute to the development and maintenance of a comprehensive security dashboard to provide real-time visibility into our security posture.
• Incident Response: Participate in incident response activities including containment eradication and post-incident. Preparation and participation in in ISO27001 and Cyber Essentials audits

Required Skills and Experience:

• Bachelors degree in Computer Science Cybersecurity or a related field.
• Minimum 5 years experience in IT with at least 3 working in an IT security role.
• Solid understanding of core security concepts including vulnerability management penetration testing security audits and encryption.
• Proven experience with the specific technologies mentioned above (Varonis Crowdstrike Falcon Google Workspace security tools).
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team.
• Audit experience - preferably ISO27001 and Cyber Essentials

Preferred Skills and Experience:

• Relevant security certifications (CISSP SSCP CISM CEH). We will actively support and encourage your pursuit of further certifications.
• Experience with other security tools and technologies.
• Knowledge of relevant security frameworks and regulations (e.g. GDPR NIST).

ABOUT YOU

• Thrive working in a high energy and fast paced environment where no two days are the same
• Be proactive with a can-do attitude - be eager to get your sleeves rolled up and learn
• Resilience to keep going in a fast paced environment
• Strive for excellence - be proud of your work and have meticulous attention to detail
• Friendly and approachable
• Build rapport and able to quickly establish excellent working relationships
• Live and breathe the agencys values
• Can do attitude
• Team player

VCCP DE&I STATEMENT

We believe that DE&I is about creating a strong culture of inclusion within our agency where everyone can thrive and be their authentic self. VCCP is an equal opportunity employer and does not discriminate on the basis of gender age disability religion belief sexual orientation marital status or ethnicity. If you require any adjustments during the application or interview process please let us know via.

CRIMINAL RECORDS INFORMATION

As part of our onboarding process you will be required to complete a Criminal Records Declaration regarding any unspent convictions. For roles in finance HR Legal IT or senior management we may be required to verify your declaration with a basic DBS check as well as an Adverse Finance and ID check.