Cyber Security Analyst in Leeds

We are Eversheds Sutherland, a global law firm, with more than 5,000 people across over 30 countries. We’re full-service with deep niche and sector experience. Whatever challenge, wherever in the world, we’re equipped and ready to meet it. We live our values, we’re purposeful and purpose-led. So although the world is fast-moving and rapidly changing, we see it as a place where everyone can thrive.

About The Role

Eversheds Sutherland are seeking an experienced Cyber Security Analyst to join our expanding Cyber Security team. You will be reporting to the Cyber Security Operations Lead within the IT department; having responsibility for the management, support, evolution and implementation of fit for purpose and innovative Security Operations that mitigate security risks. You will manage, and be responsible for, monitoring the health and security of IT assets; being responsible for incident response and resolution and for escalating risks appropriately. You will have a wonderful opportunity to focus on introducing new and evolving security capabilities and for implementing wide scale process improvement.

Key Responsibilities

• Works with Eversheds Sutherland's business units and with other risk functions to identify security requirements, using methods that may include risk and business impact assessments.
• Works with information security leadership to develop strategies and plans to enforce security requirements and address identified risks.
• Reports to Eversheds Sutherland's management concerning residual risk, vulnerabilities and other security exposures, including misuse of information assets and noncompliance.
• Plays an advisory role in application development or acquisition projects to assess security requirements and controls and to ensure that security controls are implemented as planned.
• Collaborates on critical IT projects to ensure that security issues are addressed throughout the project life cycle.
• Works with Eversheds Sutherland's IT department and members of the information security team to identify, select and implement technical controls.
• Develop security processes and procedures, and supports service-level agreements (SLAs) to ensure that security controls are managed and maintained.
• Establish, monitor, evaluate and report in a professional manner; clearly highlighting the current state of Security Operations and any associated risks.
• Provide second- and third-level support and analysis during and after a security incident.
• Assist the firm in the resolution of reported security incidents.
• Participate in security investigations and compliance reviews, as requested by internal or external auditors.
• Act as a liaison between incident response leads and subject matter experts.
• Create and monitor daily or weekly reports and security logs for unusual events.
• Develop a common set of security tools. Defines operational parameters for their use, and conducts reviews of tool output.
• Perform control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls, and recommends remedial action.
• Assist in the coordination and completion of information security operations documentation.
• Partner effectively to ensure IT response and continuity plans are documented, well communicated and practiced.
• Development of security incident run books and processes.
• Day to day security operational continuous improvement.

Skills & Experience

• Extensive experience in delivering process improvement for Cyber Operations.
• Proven ability to implement key Security Operations services and processes.
• Experience in managing security consoles.
• Excellent Incident Management and communication skills.
• Effective utilisation, and management, of external suppliers.
• Effective team leadership and coaching skills.
• Able to react quickly, decisively and professionally.

Personal Attributes

• Naturally curious, with a tenacity to mitigate incidents.
• A passion for Cyber Security and its role in Industry.
• Excellent knowledge of the Cyber Security Industry and providers.
• Good knowledge of budgeting and resource allocation procedures.
• Professional, innovative and collaborative style of working.

What’s in it for you?

• At Eversheds Sutherland, we provide benefits focused on looking after you: your development, your performance, your financial future and your health, as well as providing the opportunity to make a contribution to the world.
• We’re fair, transparent and equitable.
• We share in the success of the firm, reward alignment to our values, going above and beyond and your individual performance.
• We support flexible ways of working through our remote working policy and commitment to flexible, agile and hybrid ways of working.
• We support your health and performance through our dental, healthcare and wellness support.
• We support everything you are and all you bring through our powerful commitment to diversity and inclusion.
• We provide a platform for your career, whatever your ambitions through our structured professional and personal training, mentoring and development programs.
• We provide experience and opportunity through international and cross-function exposure.
• We provide an opportunity to give back through our pro bono work and community engagement.
• We help you plan ahead through retirement planning, insurance and assurance.

Diversity & Inclusion

At Eversheds Sutherland, “Inclusive” is a core business value. We bring together different skillsets, global mindsets and approaches. We foster diversity of thought and the freedom to put ideas into action. We have an inherent respect for the individual. We have a strong belief in collaboration and teamwork. Sharing ideas, asking questions, solving challenges and meeting our clients’ goals: together. We want all our people to thrive at work and reach their full potential and we work hard to continue to build a diverse and inclusive culture, monitor and report on our progress and impact, and develop our approach.