Information Security Controls Assurance Analyst

We are now looking for a Controls Assurance Analyst to join our Information Security team! The Controls Assurance Analyst will support the Assurance Manager in delivering the information security assurance programme. You'll perform control testing, coordinate assurance evidence, support audits and compliance activities, monitor remediation actions, and provide assurance reporting that demonstrates the effectiveness of the organisation's security control environment.,

• Perform scheduled testing of Information Security controls to assess both design and operating effectiveness.
• Execute control assessments across key security domains including Identity and Access Management, Vulnerability Management, Security Monitoring, Cloud Security, Data Protection and Third Party Security.
• Maintain documentation supporting compliance with security policies, standards and regulatory requirements, including internal and external Information Security audits.
• Support assurance activities relating to customer and third-party security assessments.
• Monitor compliance against Information Security policies, standards and regulatory requirements.
• Assist in mapping security controls to recognised frameworks including NIST, PCI DSS, ISO 27001, ISO 42001 and assist in identifying compliance gaps and supporting remediation planning.
• Support assurance activities relating to privacy, information governance and secure data handling., We value and respect all differences (seen and unseen) in all people. We aspire to have inclusive working experiences and an environment that reflects the audience we serve, where our people have equal access to career development opportunities, their voices are heard and can contribute to our future. We actively encourage applications from people of all backgrounds. Many of our staff work flexibly and we will consider all requests for flexible working arrangements.
  Demonstrated experience performing Information Security control testing and assurance activities, including a good understanding of control design and operating effectiveness.
• Good experience collecting, validating and maintaining assurance evidence.
• Familiarity with internal and external audit processes.
• Understanding of Information Security frameworks including ISO 27001, NIST CSF, NIST 800-53 and CIS Controls and experience mapping controls against recognised security frameworks Understanding of security control domains including Identity and Access Management, Vulnerability Management, Security Monitoring, Cloud Security, Data Protection
• Strong analytical and documentation skills with the ability to produce clear reporting, dashboards and management information.
• Strong communication and stakeholder engagement skills.
  Join our team at the Guardian and be a part of a diverse and inclusive global organisation that delivers fearless, investigative journalism and holds power to account. Our team of award-winning journalists, cutting-edge commercial professionals and industry-leading digital experts are committed to making a difference and represent a wide range of backgrounds and perspectives. We offer a challenging and exciting environment for career development, with a focus on training, growth and fostering an inclusive culture.
  You'll have 30 days of annual leave per year (plus bank holidays) with the option to purchase an additional 5 days. Our pension scheme is generous; if you contribute 5% then we will contribute 8-12% (depending on your age). We believe in giving back, which is why employees are given 2 volunteering days annually and the option of payroll giving. Season ticket loans are also available.
• You are entitled to private healthcare, life cover, income protection, and eye tests. You can also opt in to dental insurance. We have enhanced maternity, paternity, adoption and shared parental leave policies in place. We also support our employees by offering an IVF, menopause, baby loss, and trans equality policy. Culture and wellbeing We want everyone to feel like they belong at the Guardian and we champion diversity of thought. Our various employee forums provide a platform to use their voice to foster an inclusive workplace. We became the first major media organisation to achieve B Corp status. We offer tools to help you prioritise your wellbeing including access to our employee benefits platform which provides tailored support for health and wellbeing. In addition, we also offer free yoga and pilates classes. These run alongside our corporate gym membership and cycle to work scheme. Our canteen has views overlooking the Regents Canal and caters for breakfast, lunch and dinner., Guardian News and Media is proud to be a London Living wage employer. The minimum salary for any full-time role within the organisation is £30,000 per annum. Salary ranges are dependent on skills and experience.