Information Systems Security Engineer
At Iron Mountain we know that work, when done well, makes a positive impact for our customers, our employees, and our planet. That’s why we need smart, committed people to join us. Whether you’re looking to start your career or make a change, talk to us and see how you can elevate the power of your work at Iron Mountain. We provide expert, sustainable solutions in records and information management, digital transformation services, data centers, asset lifecycle management, and fine art storage, handling, and logistics. We proudly partner every day with our 225,000 customers around the world to preserve their invaluable artifacts, extract more from their inventory, and protect their data privacy in innovative and socially responsible ways. Are you curious about being part of our growth story while evolving your skills in a culture that will welcome your unique contributions? If so, let's start the conversation. Iron Mountain is seeking a skilled and detail-oriented Information System Security Engineer (ISSE) to join our Global Security team. In this role, you will be responsible for ensuring that departmental systems meet mandatory UK government security standards and providing the technical assurance necessary to keep our systems authorized for use. What You’ll Do (Responsibilities) In this role, you will: Framework Compliance: Ensure all digital services align with the NCSC Cyber Assessment Framework (CAF) and the Government Functional Standard for Security (GovS 007). Security Certification: Lead technical activities to achieve and maintain Cyber Essentials and Cyber Essentials Plus certifications across the estate. Vulnerability & Cloud Oversight: Utilize tools such as Tenable and Prisma Cloud to verify system patching, monitor AWS/GC configurations, and ensure alignment with UK data protection laws. Technical Risk Reporting: Translate technical findings into formal compliance reports and Security Operating Procedures (SyOps) for senior stakeholders. Assurance Collaboration: Collaborate with technical teams to identify configuration gaps and advise on necessary fixes to maintain system accreditation. What You’ll Bring (Skills & Qualifications) The ideal candidate will have: Proven Experience: A track record of preparing technical evidence for system accreditation or audits. Regulatory Expertise: Strong knowledge of UK-specific frameworks, including NCSC Design Principles and Cyber Essentials. Technical Tooling Proficiency: Comfortable navigating and extracting data from Tenable/Nessus and Prisma Cloud. Risk Management: The ability to identify technical compliance gaps and provide expert guidance on remediation. Communication: Strong skills in drafting formal security documentation and reporting to stakeholders. What We Offer (Benefits) Location: 100% remote role in the UK Competitive Compensation: Salary and benefits aligned with your professional experience. Work-Life Balance: Flexible work options to support your personal and professional needs. Health & Wellness: Comprehensive health, wellness, and retirement plans. Growth Opportunities: Access to continuous learning and professional development to stay at the forefront of cybersecurity. Ready to Secure Our Future? If you are passionate about technical assurance and want to play a critical role in protecting national infrastructure, we want to hear from you. Apply today to join the Iron Mountain team and help us set the standard for security excellence! #LI-Remote Category: Information Technology Apply To This Job