Wejo Hiring for Information Security Analyst Job at Manchester, England Full Time

Wejo is a leader in the connected car market and is shaping the future of mobility. The connected car space is one of the fastest growing sectors in the internet of things industry. Car manufacturers are looking to extend traditional infotainment systems, insurers are seeking a better understanding of risk, users are demanding more feedback and firms are generating increasing amounts of data and require support in understanding its applications and value. We specialise in creating new services and products to help clients make the most of their data and realise its value

We bring together the brightest minds and industry experts with award-winning platform technology and advanced privacy and security to revolutionise the way we live, work and travel using connected car data, insights and analytics.

At Wejo our values drive our culture, shape our interactions and help us to achieve our goals. These values are turned into meaningful behaviours and embody our employees. We are bold, collaborative and responsible.

Role Summary

The role of the Information Security Analyst is to take responsibility for a number of Information Security Governance activities in support of the wejo Information Security Management System.

You will support the Head of Information Security Governance and the wider security team to ensure all governance and oversight activities are met in line with internal and external standards and obligations.

Furthermore, the Information Security Analyst will work with our Security Operations Centre to produce insightful reporting and use the latest threat intelligence to support education and awareness across the organisation.

The successful candidate will be expected to work across several areas incl. risk management, management reporting, third party risk and policy management.

A prerequisite for everyone working in Wejo is a high level of personal resilience and the ability to manage changing priorities and complexity well.

Key Responsibilities – what I do mostly

• Play a key role in managing the reaccreditations of the security certifications (e.g. ISO27001) held and support the delivery of acquiring new certifications.
• Support the definition, maintenance and production of appropriate Information Security performance reporting (metrics) to all relevant committees and forums.
• Assist with the creation and delivery of security education and awareness across the company.
• Support the on-going maintenance and application of information security policies and procedures.
• Ensure all new software and application requests are manged in line with policy.
• Maintaining the information security risk profile via our GRC tool.
• Track audit items to ensure successful completion of all security owned actions. Providing support for auditors and minimising the impact of the audit fieldwork.
• Support the management of the Information Security budget and all associated finance related activities.
• Ensuring a professional image of the company and themselves is presented at all times.

Other Responsibilities – what I will be doing sometimes

• Using my expertise and knowledge to help in areas of the business that need support to get the job done, whatever that might be.

Essential Skills / Knowledge & Experience – what I need to do the job

• Deep understanding of the ISO27001 framework.
• Experience in supporting and maintaining ISO27001 and Cyber Essentials Plus etc.
• Strong understanding of developing and implementing Information Security policies and processes.
• Have experience of risk management practices and MI reporting.
• Experience in working with multiple different business units e.g. HR, Legal, Infrastructure.
• Strong written communication skills, with excellent attention to detail.
• Effective organisational, analytical and independent problem-solving skills.
• Demonstrates a wide range of security understanding in technology across differing platforms.
• Previous experience in a similar type of Information Security Analyst role.

Desirable – What can help me succeed

• Good understanding of Audit methodologies and frameworks.
• Recognised Information Security qualifications.
• Experience of working with GRC platforms.
• Understanding of cloud security services.

Equal Opportunity Employer: Wejo is an equal opportunity employer, committed to our diversity and inclusiveness. We consider all qualified applicants regardless of race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age. We strongly encourage women, people of color, members of the LGBTQIA community, people with disabilities and veterans to apply. We are actively working to be an anti-racist organization. We’re committing to creating an inclusive and equitable workplace for all of our employees. You can read more about our commitment to DEI here.