Information Security Analyst

We are proud to be One Team at East Midlands Railway (EMR). We are passionate about keeping people safe, delighting our customers, doing the right thing and putting customers at the heart of our sustainable railway for the East Midlands. With over 2,400 employees, our people are the reason we are so successful, and our IT team make a crucial contribution to this. Six times accredited as a Top Employer, we value our people and are dedicated to making sure that everybody feels empowered to bring their authentic self to work. We have an outstanding opportunity to work at #TeamEMR as a Lead Information Security Analyst .

At EMR we want to proactively embrace diversity across our workforce and recognise that we are under-represented in terms of females and ethnic minority groups. We’re therefore taking positive steps to promote a positive and inclusive culture; we welcome applications from those that identify with these groups to better represent our communities.

The Information Security Analyst is part of the Information Security team which ensures we protect our company information, systems and staff from cyber attacks. This role is pivotal in providing controls to protect against and respond to cyber threats and events, and to provide system and processes to minimise the likelihood and impact of those events.

The Information Security Analyst will Secure IT infrastructure is the foundation for many business-critical systems and is required to guarantee EMR services can be delivered securely to our customers. Have responsibility for for design, support, management and evaluation of the security systems that protect EMRs systems and data, working closely with the EMR IT infrastructure team on system setup and configuration. They will analyse and respond to software and hardware vulnerabilities, and work alongside the wider IT team to maintain IT security compliance and best practice, whilst addressing vulnerabilities, security procedures will be followed and developed further to ensure EMR are operating an optimal security environment.

To be great in this role you will have:

• Experience in information security or related field, with previous experience working in transport / rail desirable.
• Understanding and knowledge of common information security management frameworks and standards - ISO 27001 standard, General Data Protection Regulation (GDPR), PCI DSS, Cyber Essentials.
• Awareness of the Security of Network & Information Systems Directive (NIS-D).
• Expertise in infrastructure security delivery particularly in complex environments on premises, cloud and through 3rd party suppliers.
• Understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts
• Experienced in the design and testing of common security solutions, i.e., email and web security gateways
• Excellent verbal and written communication skills and ability to communicate and build relationships with individuals at all levels.
• Excellent analytical skills, together with attention to detail and can use their own initiative in a fast-paced environment.
• An aptitude for project management and understands the necessity to read MS Project plans and Visio documents.
• A technical security mind-set and the desire to work in a fast-paced environment that proactively seeks out solutions to problems.
• Excellent time-management skills; the ability to balance additional issues and problems as they arise against a set delivery plan and organise themselves across a 5-day working week.
• (Desirable) Valid Certified Information Systems Security Professional (CISSP) certification and a minimum of 5 years working in an IT security environment.
• (Desirable) Knowledge of onboard train systems.

As well as a competitive salary, we’ll also offer you:

• A great pension scheme
• Free First Class duty travel on the EMR network
• Free Standard Class leisure travel on the EMR network and Train Operating Companies under Abellio & LNER
• Friends and Family discounted tickets on the EMR network
• 75% discount on national leisure travel (inc partner and dependants)
• Flexible working hours
• 32 days holiday per year rising to 34 after 2 years
• …and many more!

EMR has a hybrid working policy which is applicable for this role. This means the role can be based at home on average 2-3 days per week and in the office 2-3 days per week. Should you wish to work full time in the office this is also an option.