Senior IT Technician - Cyber Security in Catcliffe

The University of Sheffield is a remarkable place to work. Our people are at the heart of everything we do. Their diverse backgrounds, abilities and beliefs make Sheffield a world class university. We offer a fantastic range of benefits including a highly competitive annual leave entitlement (with the ability to purchase more), a generous pension scheme, flexible working opportunities, a commitment to your development and wellbeing, a wide range of retail discounts, and much more.

As our new Senior IT Technician - Cyber Security, you will be an important member of the AMRC IT Support team, with a focus on responding to a wide range of IT security support tickets. You will play a key role in ensuring the AMRC IT estate is up to date, compliant and resilient against an evolving threat landscape. Working alongside the AMRC Cyber Security Manager, University of Sheffield Security Operations Centre (SOC) and Information Security Assurance (IA) teams, your focus will be on technical measures including device configuration, patching and implementing security controls and technologies to secure our end points.

You will resolve both standard IT tickets and more complex ones. You will identify tickets relating to security vulnerabilities, threats, and non-compliant devices and assist in the response to security incidents and investigations. You will work with the Cyber Security and Systems Managers to identify trends and seek to implement proactive long term centralised solutions or automations to mitigate risk and reduce recurring helpdesk tickets.

This role is based in Catcliffe, Rotherham but you will spend time on University campus with Information Security colleagues and may occasionally travel to AMRC sites in Wales and North West England, making a full UK driving license beneficial. Eligibility for elevated security clearance is essential, and the University will support the successful candidate through appropriate clearance processes.

Main duties and responsibilities

• Communication: Be a highly responsive and visible member of the AMRC and University IT Support and Information Security communities.
• Customer Skills: Deliver timely progress updates tailored to varying technical backgrounds of staff, students, visitors and external stakeholders.
• Knowledge Sharing: Advise and guide end users on information security.
• Collaboration: Collaborate with AMRC IT, University Information Security, and other stakeholders across the organisation.
• Projects: Provide technical input for projects needing tailored security or enhanced standards.

Technical Incident Response Support: As an important member of the AMRC IT Support team you will carry out some regular support activities, but will focus on picking up security tickets and responses.

Vulnerability Management: Identify and patch vulnerabilities across mobile devices, laptops, desktops, and potentially some OT devices.

Critical Infrastructure: Assist the AMRC Systems Managers to patch or remediate security issues with critical infrastructure, including on premise and cloud environments.

Adaptive Defence: Support our Cyber Security Manager in proactively refining technical security measures and countermeasures in direct response to the evolving threat landscape.

Information Advocacy

• University Alignment: Work with our Cyber Security Manager and University SOC to align technology and processes and share best practices.
• Information Champion: Serve as an Information Champion, providing guidance across the AMRC on appropriate University risk assessment processes, ISMS activities and promoting a security culture in all business-as-usual and project activities.

Information Security Culture

• Culture Building: Support initiatives raising security awareness for staff, students, and visitors.
• Training: Work with our training team to drive compliance and oversee technical sanctions for non-compliance.
• Knowledge Transfer: Mentor and train the wider IT Support team in technical security practices.

Documentation, Process, Audit and Standards

• Internal Process: Guide stakeholders through internal security assurance procedures.
• Standards & Accreditation: Conduct hands on technical activities related to maintaining certification to appropriate industry standards and internal codes of practice / connection.
• Audit: Record incidents, assessments, and reports alongside the Cyber Security Manager.
• Documentation: Create clear technical documentation and SOPs to apply security theory practically.

Other Duties: Carry out other duties, commensurate with the grade and remit of the post.

Person Specification

Our diverse community of staff and students recognises the unique abilities, backgrounds, and beliefs of all. We foster a culture where everyone feels they belong and are respected. Even if your past experience doesn't match perfectly with this role's criteria, your contribution is valuable, and we encourage you to apply.

Criteria

• Education: An honours degree (or equivalent qualification or experience) in a related subject area. Essential
• Environment: Experience of working in a team providing an effective and efficient IT Support service to a busy customer focused, but information security led organisation. Essential
• Operating Systems: Supporting knowledge of Microsoft Windows and common mobile operating systems for client deployment, imaging, fault finding and resolution. Essential
• Vulnerability Management: Experience using scanners (e.g., Tenable) to identify weaknesses and possess the technical ability to patch and remediate any issues found. Essential
• Technical Documentation: Ability to write clear, concise security focussed standard operating procedures (SOPs) for IT support colleagues. Essential
• Patching: A good understanding of software patching and information security principles relating to endpoint management via Microsoft Intune or Quest KACE. Essential
• Priorities: Have the agility to monitor multiple workstreams simultaneously, ensuring security duties remain aligned with AMRC priorities. Essential
• Problem Solving: Ability to analyse problems and develop solutions with an appreciation of longer term implications on security compliance. Essential
• Stakeholder Engagement: With excellent interpersonal and customer skills, you can translate complex support and information security challenges into actionable instructions for IT staff, and clear updates for non-technical stakeholders. Essential
• Incident Response: Experience in log analysis (SIEM) and ability to work under pressure to help investigate and contain security breaches. Desirable
• Cyber Essentials Plus (CE+): Familiarity with the technical controls of CE+ (Firewalls, Secure Configuration, User Access Control, Malware Protection, and Patch Management).