Security Governance Analyst Job at Fortnum & Mason (London)

Job Description

As a Technology Security Governance Analyst, you will support and manage elements of Fortnum & Mason Information Security Governance Framework.

Job Responsibility

Own and manage the process for third party information security assurance to ensure that ongoing security assessments are undertaken and that contractual agreements reflect information security requirements
Support information security awareness throughout the organisation including managing phishing awareness campaigns and delivering and supporting training and awareness to specific user groups
Support management and investigation of any information security incidents including ensuring that incident logs are maintained, and any actions / lessons learned are addressed
Support Fortnum & Masons PCI compliance program including ensuring evidence of compliance is collated and maintained and undertaking audit checks within stores
Manage the process for Information Security Risk Management to ensure that all information security risks are owned and documented and remediated to an agreed and accepted level
Support the process for project engagements to ensure that Information Security requirements are defined for each project, Architectural design documents are reviewed to ensure appropriate controls are in place and testing and acceptance processes are in place to ensure that agreed controls have been implemented
Serve as a hands-on Security Analyst, proactively identifying opportunities for improvement and delivering security enhancements to our systems
Collaborate with partners to ensure the security of the Cisco Meraki network, taking an initiative-taking stance in mitigating risks and initiative-taking patch management
Assist with internal and external vulnerability assessments, working with security partners to maintain PCIDSS compliance, overcome security challenges, and drive continuous improvements align to the NIST framework/ISO271002 standards
Report and review our secure device imaging using Microsoft Intune & Autopilot, ensuring a standardized, scalable, and resilient setup for retail, hospitality POS, and all corporate end user devices
Effective operation of security tooling reporting against our SIEM platform, endpoint protection solutions, and identity access controls, reviewing automated threat detection and forensic incident response to protect critical infrastructure and services
Create and manage security policy documentation, assist with security procedures, and training our internal teams and wider retail staff
Undertake disaster recovery planning, ensuring business continuity and resilience against potential disruptions
Work proactively alongside support, application, and transformation teams, fostering collaborative and communicating security procedures and policies
Deliver concise, well-structured documentation, providing clarity for teams and enabling rapid adoption of security best practices
Function as a trusted advisor, recognised as the go-to subject matter expert for security, and bridging the gap between end user and the infrastructure and security team
Guide and support third-party engagements, ensuring vendors align with enterprise security standards, compliance requirements, and best practices
Educate and empower both internal teams and the broader business, fostering a security-first culture and promoting best practices in security and business continuity

Requirements

Experience of security and compliance standards frameworks such as ISO 27001, ISO 22301, GDPR, PCI-DSS, NIST, and ACPO guidelines
Understanding of UK legal frameworks including the Data Protection Act and Computer Misuse Act
Understanding of Microsoft infrastructure including Windows Server Administrator, Active Directory AAD Administrator, Group Policy, and Microsoft 365 services and Azure Cloud resource management
Microsoft SQL Server
PowerShell scripting
Identity & Access Management (IAM), Expertise in Microsoft Entra ID (formerly Azure AD), role-based access control (RBAC), and multi-factor authentication (MFA)
Cloud Security, Experience securing Azure environments, including Microsoft Defender for Cloud, Sentinel, and compliance frameworks like PCIDSS
Threat Protection & Incident Response: Ability to identify vulnerabilities, implement threat protection, and respond to security incidents
Patch Management & Endpoint Security: Understanding of patching, importance of regular updates, patching, and endpoint protection across Windows and Azure environments
Familiarity with backup and disaster recovery tools and practices
Phishing awareness tools and ability to create training for end users on security best practices

What we offer

A generous store and restaurant discount of up to 40%
25 days holidays (excluded bank holidays) and an extra day off for your birthday
A fantastic subsidised staff restaurant which uses Fortnum’s ingredients
A range of opportunities to develop and grow personally and professionally
Excellent pension scheme

Fortnum & Mason - All Job Offers

Select Country

Security Governance Analyst

Job Description

Job Responsibility

Requirements

What we offer

Looking for more opportunities?

Security Governance Analyst

Security Governance Analyst

Lead Analyst, Information Security Governance & Compliance

Information Security Technology Analyst - Governance

Security Governance Risk & Compliance (GRC) Analyst

Cloud Security Senior Cyber Security Analyst

Senior Governance, Risk and Compliance Analyst - Governance

Network Security Analyst RSA Archer Specialist

Security Analyst

Our AI answers in your language