Job Title: IT Security Analyst
Corporate Title: Associate

Department: IT Security

Location: London
 

Company overview

Nomura is a global financial services group with an integrated network spanning approximately 30 countries and regions. By connecting markets East & West, Nomura services the needs of individuals, institutions, corporates and governments through its three business divisions: Wealth Management, Investment Management, and Wholesale (Global Markets and Investment Banking). Founded in 1925, the firm is built on a tradition of disciplined entrepreneurship, serving clients with creative solutions and considered thought leadership. For further information about Nomura, visit www.nomura.com

Department overview:

Nomura employs a robust IT Security department, members of which are located in all of its major regions, namely EMEA, Americas, India, Asia excluding Japan (AeJ) and Japan. This team is responsible for reviewing UK regional users’ queries and ensures Nomura’s IT Security Policy and strategy is always followed.
 

Role description:
The candidate will need to coordinate Regionally IT Security functions across Nomura wholesale. The role will require in-depth understanding of IT Security principles, technologies and best practices.
 

• Collaborate with business users and IT professionals, to gather information, review requirements and provide security recommendations.
• Provide regional support for implementation of security controls as part of the IT Security roadmap and initiatives
• Identify and document security risks identified during project initiatives and BAU activities.
• Review technology changes to ensure that they do not introduce security weaknesses.
• Provide regional support for BAU activities including review of end user exception requests.
• Provide regional IT Security operational support for investigation of security alerts
• Provide regional support to Third Party Risk Management team with security assessments.
• Provide support for disaster recovery plans in the event of any security breaches.
• Conduct internal training, workshops, and information dissemination on IT security.
• Validate vulnerability findings and provide guidance during remediation efforts.

The position will also be required to work along with other teams in these security areas:

• Vulnerability Management
• Security Architecture
• Threat Intelligence
• Security Operations Centre
• Security Surveillance
• Vender Risk Management
• Cyber Incident Response and Forensics
• Penetration Testing and Red Team Exercises
• Governance, Risk, and Compliance (GRC)

Skills, experience, qualifications and knowledge required:
 

• Bachelor’s degree in computer science or related field, minimum 3+ years of progressive experience in information Security and banking industry.
• Certification is required, such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Information Systems Auditor (CISA) or similar industry recognized certifications (or willingness to pursue).
• Ability to prioritize and effectively document issues.
• Ability to effectively balance time between day-to-day support work and project-related tasks.
• Ability to cope with business needs and to respond to and address production situations promptly.
• Knowledge and understanding of relevant legal and regulatory requirements in the UK.
• Knowledge and understanding of Cyber risk governance processes and metrics.
• Experience in networking, firewall and internet proxy technologies.

Preferred

• Experience in Third party and supply chain risk security processes.
• Experience in Vulnerability Management processes.
• Experience in Third party and supply chain risk security processes.
• Experience in Data Loss Prevention technologies.
• Experience with Threat Intelligence Platforms.
• Experience in Application and Network Penetration Testing Methodologies.

Right to Work

The UK Government have taken steps to reduce net migration to the UK by limiting the number of overseas workers from outside the EEA coming to the UK for employment. Please note that whilst we are able to consider applications from overseas workers from outside the EEA (who require a Tier 2 (General) visa) we can only employ them if we can provide evidence that there are no other suitable candidates for this vacancy from inside the EEA.

Please contact us if you are visiting our offices and require any form of personal assistance or physical adaptations to be provided for your appointment.  A member of staff will be happy to help.

Diversity Statement

Nomura is committed to an employment policy of equal opportunities, and is fundamentally opposed to any less favourable treatment accorded to existing or potential members of staff on the grounds of race, creed, colour, nationality, disability, marital status, pregnancy, gender or sexual orientation. If you require any assistance or reasonable adjustments due to a disability or long-term health condition, please do not hesitate to contact us.