IT Cyber Security Analyst

Responsibilities:

• Protecting the Company's systems from cyber threats and unauthorised access.
• Support implementation and enforcement of information and cyber security policies.
• Play a lead role in cyber security governance.
• Working with third-party service providers to monitor networks, servers and systems for suspicious activity, security breaches or vulnerabilities.
• Using available tools to detect and respond to potential threats and recommend improvements.
• Documenting and investigating security incidents, determining scope and impact, supporting containment of any threats, analysing root cause and advising on recovery of affected systems where necessary.
• Reporting findings to management.
• Monitor, record and act, where required, in real time on cyber security alerts.
• Lead or support incident response efforts during and outside working hours.
• Monitor identity and access management, including monitoring for abuse of permissions by authorised system users.
• Produce accurate, timely and insightful cyber security management information (MI), including threat trends, incident metrics, vulnerabilities and compliance against security controls, including preparation of reports.
• Oversight, management and reporting on all risks and their controls relating to information and cyber security.
• Keep up to date with the latest security and technology developments.
• Understand emerging cyber security threats and vulnerabilities and their potential impact to ULP.
• Make recommendations to manage or mitigate as appropriate.
• Evaluate new technologies, tools, applications and suppliers to ensure security is embedded in the design, development, implementation and maintenance of all new initiatives.
• Coordinate and participate in internal and external audits in relation to information and cyber security.
• Provide evidence and ensure timely remediation of audit findings.
• Promote a culture of security amongst colleagues and other stakeholders and support wider security initiatives.
• Assist with the creation, maintenance and delivery of cyber security awareness training for colleagues.
• Give advice and guidance.
• Ad hoc tasks as required.
• Comply with the FCA's conduct (and senior conduct) and Consumer Duty rules and the PRA's conduct (and senior manager conduct) standards as set out.
• Notify the regulator(s) of matters reasonably expected to be notified.

Core Competencies:

• Experience of MS Office applications.
• Ability to clearly and concisely document solutions, processes, procedures and write technical reports.
• Strong analytical, data analysis and problem-solving skills.
• Effective time management skills, ability to manage and deliver multiple tasks within demanding deadlines.
• Strong attention to detail.
• Ability to work both independently and as a member of a team, recognising and valuing the input and expertise of others.
• Willingness to learn and develop.

Experience and Qualifications:

• Required: Strong understanding of information security principles, frameworks (e.g. ISO 27001, NIST) and best practices.
• Hands-on experience with security technologies such as firewalls, SIEM, IDS / IPS, vulnerability scans, endpoint detection and response (EDR) and identity management solutions.
• At least 3 years of experience in a Cyber Security role.

• Desirable: An understanding of IT infrastructure, including network architecture, operating systems, firewalls, VPNs, SIEM tools, encryption and endpoint security.
• Experience of Microsoft Azure and M365 cloud technologies.
• Degree in Computer Science, Cyber Security or related field, or relevant practical experience.
• Relevant cybersecurity certification.
• Experience creating Cyber Security Roadmaps.