FAQs
What is the primary focus of the Information Security Risk Analyst role at Rothschild & Co?
The primary focus is to assist the 2nd Line Information Security Risk team in investigating potential data breaches, coordinating alerts from Threat Intelligence providers, and organizing Information Security Education and Awareness campaigns.
Is previous experience in Information Security required to apply for this position?
No previous experience in Information Security is required, although any experience in risk management, Information Security, or IT roles would be helpful.
What types of duties would the Information Security Risk Analyst be expected to perform?
Duties include investigating data breaches through Data Loss Prevention technologies, analyzing controls within the internal environment, coordinating alerts, promoting information security awareness, and assisting with education and awareness campaigns.
What skills are desired for candidates applying for this role?
Desired skills include a passion for learning about Information Security, good written and verbal communication skills, analytical skills, the ability to manage multiple projects, and proficiency in Office products, especially Excel and SharePoint.
How important is communication in this role?
Communication is very important, as the role requires the ability to effectively convey security and risk-related concepts to both technical and non-technical audiences, and to communicate with colleagues and stakeholders of varying levels of seniority.
Which departments might the Information Security Risk Analyst collaborate with?
The Information Security Risk Analyst will collaborate closely with IT, HR, and other internal stakeholders.
What type of environment does Rothschild & Co promote regarding diversity and inclusion?
Rothschild & Co promotes an inclusive and supportive environment where diversity and different perspectives are valued, emphasizing the importance of attracting, developing, and retaining high-caliber talent.
What is the significance of the Education and Awareness campaigns in this role?
The Education and Awareness campaigns are crucial for promoting Information Security within the firm, including conducting phishing simulations and providing mandatory training programs throughout the year.
What type of reporting will the Information Security Risk Analyst be responsible for?
The analyst will be responsible for producing regular and ad-hoc reporting on Group metrics, as well as preparing Management Information and Key Risk Indicators related to the Risk & Control programme.
What does the role entail in terms of risk analysis?
The role entails performing analysis on controls within the internal environment, analyzing risks of third parties, and ensuring Information Security requirements are addressed when engaging with new service providers or tools.