Information Security Analyst

VCCP is the global challenger network for challenger brands. With more than 1,500 people across 13 offices in North America, EMEA and APAC, we challenge convention to create value for the world’s most ambitious organisations.

Our founding belief is It Only Works If It All Works. That’s why we bring specialists from every discipline - strategy, AI, data, media, digital, experience, branding, creativity, production, PR, CX, CRM, employee engagement and beyond - into one fully integrated challenger network.

We were founded on the principles of simplicity, collaboration and un-preciousness, and we’ve grown by staying true to them. Today, our clients include some of the world’s most recognisable and progressive brands, such as Virgin Media O2, Barclays, Cadbury, Compare the Market, Domino’s, White Claw, easyJet, Primark and Co-op.

VCCP has topped the AAR’s annual new business ranking in 13 of the last 14 years and holds multiple Agency of the Year titles. Across every company and every capability, we share the same ambition: to challenge ourselves, challenge our clients and challenge the industry for the better.

THE ROLE

We are seeking a highly motivated and experienced Information Security Analyst to join our growing IT team. This role is crucial in maintaining and enhancing our security posture, protecting our valuable data assets, and ensuring compliance with industry best practices and certifications. The ideal candidate will have a strong foundation in IT security principles and practical experience in a variety of security domains. You will be a key player in identifying and mitigating risks, responding to security incidents, and driving continuous improvement in our security controls.

Responsibilities

• Varonis Platform Expertise: Customise and leverage the Varonis platform to generate insightful reports and dashboards, providing high-value intelligence on data access and usage patterns.
• Endpoint Detection and Response (EDR) and SIEM Management: Own and manage our Falcon Crowdstrike EDR and SIEM solutions. This includes monitoring, analyzing alerts, investigating security incidents, and driving remediation efforts.
• Google Workspace Security: Analyse security events using Google Admin Auditing capabilities. Develop and implement solutions to enhance Gmail security, effectively reducing spam and phishing incidents.
• Security Awareness Training: Plan and execute quarterly phishing campaigns to educate employees and reinforce security best practices.
• Vulnerability Management: Conduct regular asset scanning and vulnerability assessments, prioritizing and remediating identified weaknesses.
• Compliance and Certifications: Take a leading role in maintaining ISO27001 and Cyber Essentials certifications. Develop a comprehensive plan to achieve Cyber Essentials Plus certification and lead all associated audits.
• Security Questionnaires: Assist in the timely and accurate completion of security questionnaires for clients and partners.
• Policy Management: Assist in maintaining and updating IT and security policies, ensuring they remain relevant and effective.
• Business Continuity Planning (BCP): Assist in testing and refining our Business Continuity Plan to ensure organisational resilience.
• Infrastructure Security Collaboration: Work closely with the Infrastructure team to enhance existing security processes and develop best practices encompassing all infrastructure components to minimise exploitable vulnerabilities.
• Security Dashboard Development: Contribute to the development and maintenance of a comprehensive security dashboard to provide real-time visibility into our security posture.
• Incident Response: Participate in incident response activities, including containment, eradication, and post-incident. Preparation and participation in in ISO27001 and Cyber Essentials audits

Required Skills and Experience

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Minimum 5+ years experience in IT with at least 3 working in an IT security role.
• Solid understanding of core security concepts, including vulnerability management, penetration testing, security audits, and encryption.
• Proven experience with the specific technologies mentioned above (Varonis, Crowdstrike Falcon, Google Workspace security tools).
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team.
• Audit experience - preferably ISO27001 and Cyber Essentials

Preferred Skills and Experience

• Relevant security certifications (CISSP, SSCP, CISM, CEH). We will actively support and encourage your pursuit of further certifications.
• Experience with other security tools and technologies.
• Knowledge of relevant security frameworks and regulations (e.g., GDPR, NIST).

ABOUT YOU

• Thrive working in a high energy and fast paced environment, where no two days are the same
• Be proactive with a can-do attitude - be eager to get your sleeves rolled up and learn
• Resilience to keep going in a fast paced environment
• Strive for excellence - be proud of your work and have meticulous attention to detail
• Friendly and approachable
• Build rapport and able to quickly establish excellent working relationships
• Live and breathe the agency’s values
• Can do attitude
• Team player

VCCP DE&I STATEMENT

We believe that DE&I is about creating a strong culture of inclusion within our agency, where everyone can thrive and be their authentic self. VCCP is an equal opportunity employer and does not discriminate on the basis of gender, age, disability, religion, belief, sexual orientation, marital status, or ethnicity. If you require any adjustments during the application or interview process, please let us know via joinus@vccp.com.

CRIMINAL RECORDS INFORMATION

As part of our onboarding process, you will be required to complete a Criminal Records Declaration regarding any unspent convictions. For roles in finance, HR, Legal, IT or senior management, we may be required to verify your declaration with a basic DBS check, as well as an Adverse Finance and ID check.