At a Glance
- Tasks: Conduct audits and ensure compliance with security policies and best practices.
- Company: Join a dynamic team focused on securing the UK Energy Sector.
- Benefits: Enjoy a hybrid work model with up to £756 per day.
- Why this job: Make an impact in security while working with cutting-edge technologies.
- Qualifications: Active Security Clearance and knowledge of security frameworks required.
- Other info: Contract runs until 31/12/2025; only successful applicants will be contacted.
The predicted salary is between 60000 - 84000 £ per year.
Role Title: Security Auditor
Duration: contract to run until 31/12/2025
Location: Wokingham, Hybrid 60% remote 40% onsite
Rate: up to £717 p/d Umbrella inside IR35
Clearance required: Active Security Clearance is necessary
Key Skills/Requirements
- Security Integration : Drive the delivery of defined security requirements into the project, becoming an essential part of the project team.
- Regulatory Compliance : Lead on all security areas and regulatory commitments, including identifying non-compliances and managing them to remediation.
- Security Testing : Support security testing of the service, including Non-Functional Requirements (NFR) and Penetration Testing.
- Transition to BAU : Assist in the transition of security services into BAU operations, ensuring seamless integration and ongoing compliance.
Areas of Focus
- Security Policy and Controls
- ISA/IEC 62443 Standards
- NCSC Cyber Assessment Framework (CAF) and Guidelines
Desirable Knowledge and Skills
- Industry Expertise : Familiarity with the UK energy sector and its unique security challenges.
- Agile Methodologies : Experience with agile delivery methodologies and their application in security projects.
- Containerised Services : Understanding of best practices related to securing containerised services.
Qualifications
- Proven experience in a similar role within the cyber security field.
- Strong knowledge of security policies, controls, and regulatory standards.
- Excellent problem-solving skills and the ability to manage multiple tasks simultaneously.
- Strong communication and interpersonal skills, with the ability to work effectively within a team.
All profiles will be reviewed against the required skills and experience. Due to the high number of applications, we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!
Seniority Level
Mid-Senior level
Employment Type
Contract
Job Function
Information Technology
Industries
Services for Renewable Energy
#J-18808-Ljbffr
Security Auditor employer: Undisclosed
Contact Detail:
Undisclosed Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Security Auditor
✨Tip Number 1
Make sure you have a solid understanding of the NESO Security Policy and controls, as well as the NCMS Security Requirements. Familiarizing yourself with these frameworks will help you demonstrate your expertise during discussions.
✨Tip Number 2
Highlight any experience you have with security audits in the UK Energy Sector. This industry knowledge can set you apart from other candidates and show that you understand the specific challenges and regulations involved.
✨Tip Number 3
Be prepared to discuss your experience with Agile Delivery methodologies. Showing that you can adapt to different project management styles will be beneficial, especially in a hybrid work environment.
✨Tip Number 4
If you have experience with containerized services, make sure to mention it. Best practices in securing these services are increasingly important, and demonstrating your knowledge can give you an edge.
We think you need these skills to ace Security Auditor
Some tips for your application 🫡
Understand the Role: Make sure you fully understand the responsibilities of a Security Auditor. Familiarize yourself with the NESO Security Policy, NCMS Security Requirements, and relevant industry standards like ISA/IEC 62443.
Highlight Relevant Experience: In your CV and cover letter, emphasize your experience with audit and assurance processes, security testing, and any previous work in the UK Energy Sector. Be specific about your contributions and outcomes.
Showcase Your Skills: Clearly outline your skills related to Agile Delivery methodologies and securing containerized services. Use examples to demonstrate how you've applied these skills in past roles.
Tailor Your Application: Customize your application to reflect the key skills and requirements mentioned in the job description. Use similar language and terminology to show that you are a good fit for the role.
How to prepare for a job interview at Undisclosed
✨Understand the Security Policies
Make sure you are well-versed in the NESO Security Policy and controls. Familiarize yourself with how these policies apply to the NCMS service, as this will be a key focus during your interview.
✨Showcase Your Audit Experience
Be prepared to discuss your previous experience conducting audits and assurance processes. Highlight specific examples where you identified non-compliances and managed them to remediation.
✨Familiarize Yourself with Industry Standards
Brush up on ISA/IEC 62443 and NCSC CAF guidelines. Demonstrating knowledge of these standards will show that you are serious about security best practices and can apply them effectively.
✨Discuss Agile Methodologies
Since Agile Delivery methodologies are mentioned, be ready to talk about your experience working in Agile environments. Share how you have applied Agile principles in security contexts, especially in relation to containerized services.