IT Cyber Security Analyst

Responsibilities include protecting the Company's systems from cyber threats and unauthorised access, supporting the implementation and enforcement of information and cyber security policies, and playing a lead role in cyber security governance.

Key tasks involve:

• Working with third-party service providers to monitor networks, servers, and systems for suspicious activity, security breaches, or vulnerabilities.
• Using available tools to detect and respond to potential threats and recommending improvements.
• Documenting and investigating security incidents, determining scope and impact, supporting containment of threats, analysing root causes, and advising on recovery of affected systems.
• Reporting findings to management.
• Monitoring, recording, and acting in real-time on cyber security alerts.
• Leading or supporting incident response efforts during and outside working hours.
• Monitoring identity and access management, including abuse of permissions by authorised system users.
• Producing accurate, timely, and insightful cyber security management information (MI), including threat trends, incident metrics, vulnerabilities, and compliance against security controls.
• Oversight, management, and reporting on all risks and their controls relating to information and cyber security.
• Keeping up to date with the latest security and technology developments and understanding emerging cyber security threats and vulnerabilities.
• Making recommendations to manage or mitigate risks as appropriate.
• Evaluating new technologies, tools, applications, and suppliers to ensure security is embedded in the design, development, implementation, and maintenance of new initiatives.
• Coordinating and participating in internal and external audits related to information and cyber security.
• Providing evidence and ensuring timely remediation of audit findings.
• Promoting a culture of security amongst colleagues and stakeholders and supporting wider security initiatives.
• Assisting with the creation, maintenance, and delivery of cyber security awareness training for colleagues.
• Giving advice and guidance.
• Completing ad hoc tasks as required.
• Complying with the FCA’s conduct and Consumer Duty rules and the PRA’s conduct standards.
• Notifying the regulator(s) of matters reasonably expected to be notified.

Core Competencies:

• Experience of MS Office applications.
• Ability to clearly and concisely document solutions, processes, procedures, and write technical reports.
• Strong analytical, data analysis, and problem-solving skills.
• Effective time management skills, with the ability to manage and deliver multiple tasks within demanding deadlines.
• Strong attention to detail.
• Ability to work both independently and as a member of a team, recognising and valuing the input and expertise of others.
• Willingness to learn and develop.

Experience and Qualifications:

• Strong understanding of information security principles, frameworks (e.g. ISO 27001, NIST), and best practices.
• Hands-on experience with security technologies such as firewalls, SIEM, IDS/IPS, vulnerability scans, endpoint detection and response (EDR), and identity management solutions.
• At least 3 years of experience in a Cyber Security role.

Desirable:

• An understanding of IT infrastructure, including network architecture, operating systems, firewalls, VPNs, SIEM tools, encryption, and endpoint security.
• Experience of Microsoft Azure and M365 cloud technologies.
• Degree in Computer Science, Cyber Security, or related field, or relevant practical experience.
• Relevant cybersecurity certification.
• Experience creating Cyber Security Roadmaps.