United Kingdom onlyabout us:
Spectrum.Life is a whole-of-health digital partner that guides organisations and their people to thrive, delivering clinically backed digital health, mental health and wellbeing solutions.
Our HealthTech delivers digital transformation for Insurers, Educators and Employers through Co-creation or seamlessly integrated out-of-the-box solutions, that decrease digital fragmentation and engage, empower, and transform their people’s lives.
Established in 2018 by Stuart McGoldrick and Stephen Costello, Spectrum.Life provides services internationally to over 7.2m insurance members, 3,000 corporate clients, 60 universities and 650,000 university students. Spectrum.Life currently employs over 450 people.
Our vision is to change and save as many lives as possible.
role brief:
The Security & Privacy Analyst will play a key role in protecting Spectrum.Life’s information assets, ensuring privacy-by-design across products and services, and supporting the organisation in meeting high standards of security, compliance, and data protection. This role combines hands-on security operations, privacy analysis, compliance monitoring, and cross-functional collaboration with engineering, product, operations, and clinical teams.
responsibilities:
Information Security
- Monitor, assess, and respond to security alerts, incidents, and vulnerabilities across the technology environment.
- Support security operations activities including log analysis, threat detection, endpoint security, and access control management.
- Conduct regular vulnerability assessments and coordinate remediation with relevant teams.
- Assist in maintaining and improving security tools, controls, and frameworks (e.g., SIEM, IAM, MDM, KnowBe4, encryption standards).
- Support third-party security reviews and due diligence assessments.
- Participate in business continuity and disaster recovery planning and testing.
- Support GDPR and other applicable privacy frameworks (e.g., ePrivacy, UK GDPR, HIPAA-aligned practices for clinical contexts).
- Conduct Data Protection Impact Assessments (DPIAs) and Legitimate Interest Assessments (LIAs).
- Assist in maintaining Records of Processing Activities (RoPA).
- Review new product features and vendor integrations for compliance with privacy-by-design and security-by-design principles.
- Monitor adherence to internal data protection policies and assist in facilitating corrective actions.
- Assist with internal audits, risk assessments, and external certifications (e.g., ISO 27001, DCB0129/0160, Cyber Essentials).
- Help develop and maintain security and privacy documentation, standards, and procedures.
- Track remediation of audit findings and risk treatment plans.
- Support employee security/privacy training and awareness initiatives.
- Contribute to policy updates and ensure alignment with regulatory requirements.
- Support investigations of potential data breaches or security incidents.
- Assist in managing the incident lifecycle from detection to resolution.
- Help prepare incident reports, root cause analyses, and corrective action plans.
- Work with internal teams to implement lessons learned and strengthen preventive controls.
requirements:
This is an entry level position. Experience in any of the following areas would be desirable;
- Experience in information security, privacy, compliance, or a related field.
- Strong understanding of GDPR, data protection principles, and privacy best practices.
- Familiarity with security operations, vulnerability management, and incident response.
- Experience with security tools (e.g., SIEM, endpoint protection, logging platforms).
- Ability to interpret risks and communicate them clearly to technical and non-technical audiences.
- Strong documentation, analytical, and problem-solving skills.
- Excellent attention to detail and commitment to quality.
- Experience in health-tech, clinical platforms, or handling sensitive health data.
- Certifications such as ISO 27001 Lead Implementer/Auditor, CompTIA Security+, CISSP, CIPP/E, or equivalent.
- Experience supporting audits or managing compliance frameworks.
- Familiarity with cloud security and secure development practices.
what are the benefits of working at spectrum.life?
- Full time permanent contract
- Competitive salary (Dependent on experience).
- In-office, remote or hybrid working options
- 25 days annual leave
- 24/7 EAP and a wide range of health and wellbeing supports
- Extensive list of employee perks and benefits https://app.box.com/s/6wwkvowbev6cn7tlvq9yz32amnpmnvcl
Ireland
