Total 16 information analyst job vacancies in Legal / Public / Security category in UK South or UK Midlands, Dorset, DT3 1TD

Please see the attached Job Description and Person Specification for more information about the role and responsibilities. Please ensure your supporting statement includes demonstrable evidence and specific examples on how you meet the criteria for each of the key skills specified. This will be used in both the shortlisting and interview processes The post of Senior Security Advisor has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 20% per annum. Please be aware that RRP is none contractual and subject to review. Important: Please be aware there are residency requirements you need to meet: All NHS England Cyber Security personnel must hold security clearance SC level as a minimum. To meet National Security Vetting requirements, you must have resided in the UK for a minimum of 3 out of the past 5 years for SC clearance. Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role - will still be considered. Please make sure you meet these requirements before applying for this role. You don't need to have SC already, however, failure to achieve the requirements for SC after offer, will result in the job offer being withdrawn.

Cyber Operations purpose is to support safe care and build public trust by building NHS England’s cyber resilience and enabling the wider health system to be cyber resilient, supporting Transformation Directorate’s purpose of delivering the best care and outcomes for the NHS.

The Cyber Operations sub-directorate consists of 4 operational areas:
• Cyber Security Operations Unit (CSOU) - SIO
• Cyber Delivery Unit (CDU).
• Cyber Improvement Programme.
• Chief Information Security Office Function (CISO)

The Senior Incident Manager role is a great opportunity to work within the CSOU leading on the management of serious and complex cyber security investigations.
You should have great communication skills and not be averse to public speaking and be able to communicate concepts and ideas across a range of stakeholders.
You will lead on process improvement work within the Incident Management team and act as a Cyber Security subject matter expert.
Flexibility is required as during an incident there may be extended hours of work.
You must be able to prepare reports to a standard that would withstand robust scrutiny.
An understanding of the computer misuse act and the data protection act is required.
You should be able to understand the cyber threat landscape.
You should understand the volatility of data, the importance of continuity of evidence and digital forensics.
• Manage Serious and Complex Cyber Security Investigations.
• Write and develop documentation such as playbooks and user guides.
• Write detailed investigation reports.
• Gather and manage large volumes of information from a variety of sources during an investigation.
• Support Incident Managers and Juniors Incident Managers with their investigations.
• Act as a second-tier escalation point for analysts within the CSOU.
• Manage and resolve more complex enquiries.
• Manage Cyber Incident Response teams that are deployed during a cyber security incident.
• Create strategies for digital forensics investigators.
• Run and chair blended calls during a Cyber Security Incident, ensuring they are structured and effective.
• Ensure standards by reviewing security tickets created by analysts and Incident Managers within the CSOU.
• Deliver cyber security and Incident Management presentations to a diverse audience.
• Write articles and share information that can help educate the wider systems on current and emerging cyber security threats.
• Gather key performance indicators and deliver reports.
• Use tooling such as Sentinel, Microsoft Defender for Endpoint and Splunk during cyber security investigations.
• Work across teams to develop and advance cyber security investigations by bringing together a variety of skills sets and knowledge to achieve successful outcomes.
• Act as a cyber security Subject Matter Expert for projects and improvements across the transformation directorate.

The NHS England board have set out the top-level purpose for the new organisation to lead the NHS in England to deliver high-quality services for all, which will inform the detailed design work and we will achieve this purpose by:
• Enabling local systems and providers to improve the health of their people and patients and reduce health inequalities.
• Making the NHS a great place to work, where our people can make a difference and achieve their potential.
• Working collaboratively to ensure our healthcare workforce has the right knowledge, skills, values and behaviours to deliver accessible, compassionate care
• Optimising the use of digital technology, research, and innovation
• Delivering value for money.

If you would like to know more or require further information, please visit https://www.england.nhs.uk/.

Colleagues with a contractual office base are expected to spend, on average, at least 40% of their time working in-person.

Staff recruited from outside the NHS will usually be appointed at the bottom of the pay band.

NHS England hold a Sponsor Licence; this means that we may be able to sponsor you providing the Home Office requirements are met. To be eligible for sponsorship through the Skilled Worker route you’ll usually need to be paid the ‘standard’ salary rate of at least £38,700 per year, or the ‘going rate’ for your job, whichever is higher. You can find more information on the Government website.

Please see the attached Job Description and Person Specification for more information about the role and responsibilities.  
Please ensure your supporting statement includes demonstratable evidence and specific examples on how you meet the criteria for each of the key skills specified. This will be used in both the shortlisting and interview processes

The post of Senior Security Advisor has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 20% per annum.
Please be aware that RRP is none contractual and subject to review.

Important: Please be aware there are residency requirements you need to meet:
All NHS England Cyber Security personnel must hold security clearance SC level as a minimum. To meet National Security Vetting requirements, you must have resided in the UK for a minimum of 3 out of the past 5 years for SC clearance. Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role - will still be considered.
Please make sure you meet these requirements before applying for this role. You don’t need to have SC already, however, failure to achieve the requirements for SC after offer, will result in the job offer being withdrawn.


This advert closes on Sunday 27 Oct 2024

TSB Bank Plc



Job Title: Infrastructure Security AnalystFunction: CISOSalary: Competitive plus generous benefits packageLocation: Edinburgh or London – Hybrid Working At TSB we’re all here to give money confidence to our customers and communities. Wherever you work in TSB you can make a real difference to your career, our business, and the wider community. We’re transforming the service we provide our customers, and technology will be at the forefront of that change. It’s an exciting transformation and we’re investing in an enhanced in-house capability to deliver it – so, if you’re a forward-looking and innovative IT professional, this is your opportunity to be in on the ground floor and help us build the future of banking. How you’ll make a differenceWe're looking for someone passionate about cyber security. As an Infrastructure Security Analyst, you will support the infrastructure security team to manage threats to TSB, whilst ensuring our security parameters remain at the appropriate levels to protect TSB and its customers. You will also provide relevant infrastructure security knowledge in all new and existing programmes across TSB. You will make a difference in your role by supporting the implementation of Infrastructure & Cloud security strategy, policy, controls, services, metrics and compliance. You will also support on vulnerability management, WAF, DDoS and Firewall controls, services, metrics and compliance for the on-premise and cloud estate. What you’ll bring
- A track record of recent delivery in offensive / defensive techniques and awareness of any open-source framework such as OWASP, CVSS etc.
- Has proven recent experience of delivery across networking and network security devices both on premise and in corresponding capabilities in cloud service providers.
- Full technical capability to quickly get hands on operating & optimising the tooling in place to implement the Vulnerability / Firewall / WAF & DDoS solutions.
- Able to demonstrate a good understanding of DDoS and WAF protection measures.
- Good awareness of the concepts of micro segmentation
- Preferably a degree in an Information Security related discipline, or have certifications such as CISM, CISSP, CSSLP or equivalent.
- Experience of scanning estate for compliance and vulnerabilities, take accountability for driving remediation and ability to track and report on non-compliance remediation. If this sounds up your street, come join our team, we make things happen! We Are TSB, Life Made More.

Job Title: Regional Information Security and Assurance Lead

Directorate: Probation Service

Band: 4

Eligibility to Apply / Technical Requirement:

There will be a requirement for staff within the National Security Division to apply for Enhanced Level 2 or CTC Clearance

Overview of the job

The Regional Information Security and Assurance Officer (RISAL) sits within the Corporate Service function in the Probation Service region and reports directly to the Head of Corporate Services.

They will have line management responsibility for Information Security related Project Officers within the region.

The RISAL is the link between the Probation Service region and the HMPPS Information Security Team.

The geographical base for the RISAL post can be flexible within their regional area and will require travel across the region and some work in London and other locations.

Summary

The RISAL is responsible for ensuring compliance across all Probation Service units within the region with all Information Security Policy Framework requirements and ensuring all quarterly and annual departmental returns are completed and submitted in an accurate and timely manner on behalf of the Regional Probation Director who is the Information Asset Owner.

As the Subject Matter Expert, the RISAL will be required to lead investigations into all security incidents and breaches and report their findings and recommendations in full to the commissioning manager.

The RISAL will chair and manage the Regional Information Assurance Committee and will have a seat on the National Information Management Programme Board chaired by the Business Strategy and Change Lead.

Responsibilities, Activities & Duties

The job holder will be required to carry out the following responsibilities, activities and duties:

• As Subject Matter Expert, the RISAL will be the Lead investigator into information security incidents and data breaches. They will lead investigations into how incidents occur and report their findings to the commissioning officer and will give evidence when required, such as disciplinary hearings. The RISAL is responsible for ensuring all recovery actions, both for individuals and for the Service, following an incident are completed and that lessons are learned and shared to avoid future incidents across the region. They will update local policy and best practice guidance to reflect any lessons learned. The RISAL will also be the Regional Point of Contact for any investigations arising from the Information Commissioners Office ( ICO).

• The RISAL is responsible for adapting and regionalising the National Information Security Policy Frameworks into a robust and embedded local policy to deliver key milestones. Through collaboration and consultation with senior leaders across the region the RISAL will ensure the policy is implemented and embedded. The RISAL will be the driver, on behalf of the Regional Probation Director, for culture change around all aspects of the Information Security Policy Framework and Information Risk, delivering best practice.

• The RISAL will routinely undertake compliance visits across all sites in the region and will be responsible for developing and managing the Regional Risk Register appropriately, managing any emerging risks providing assurance and escalating risk where required to Regional Probation Director or HMPPS Information Security. They will identify and agree any necessary recovery actions with the site lead and monitor progress through to completion.

• Cabinet Office commission completion of an annual information security compliance statement, (Departmental health check), across Government. The RISAL is responsible for ensuring the ongoing departmental health check is completed on behalf of the Regional Probation Director, within a timely manner as stipulated by HMPPS Information Security. The RISAL will be required to understand any areas of deficiency within the Region and implement a robust strategy to improve levels of compliance across the Region.

• Provide technical expertise to ensure the Regional Probation Director and Senior Leadership Team understand their responsibilities as Information Asset Owner and Information Asset Custodians.

• Provide a monthly status report on Security Incidents/Breaches, to the Senior Leadership Team, including trends and risks analysis and demonstrating actions and mitigations the RIASL has completed and any further required recommendations for controls and mitigating actions.

• Provide technical advice and guidance to Heads of Departments to ensure the correct information is gathered to develop accurate Information Sharing Agreements (ISAs) with 3rd party providers and charities. The RISAL will be responsible for approving all ISAs on behalf of the Regional Probation Director.

• The RISAL will have line management responsibility for any Project Officer resource in the region that has been allocated to the information assurance ambitions of the region. They will be responsible for oversight of their work, formal line management of individuals, management of capability and performance, development of individuals, and day to day supervision of project officers.

• Leading on a culture change programme in the Region to ensure a positive Information Management culture is embedded across the Probation Service region making all staff are aware of best practice and their individual responsibility for information security; the RISAL will employ a range of approaches including developing and issuing bulletins to highlight key messages on lessons learned and shared best practice and innovative strategies to maximise impact.

The Company Civmec is an Australian-owned, integrated, multidisciplinary heavy engineering and construction services provider to the energy, resources, infrastructure, marine and defence sectors. With a pipeline of more than $1 billion in current and future projects, our diversification enables us to operate extensively across the nation, supporting a wide range of landmark projects and providing variety and career development opportunities for our workforce.  Join the Civmec Team Civmec is currently seeking a Cyber Security Analyst to join our growing IT and Cyber Security Department. Reporting to the Cyber Security Manager, you will have an internal business ... Click here to view more detail / apply for Cyber Security Analyst

Cyber Security Lead

Hybrid

50k (flex) + Car Allowance (5k)

Variety of locations: Weymouth, Dorset, London or Stoke.

The Client:

Are a well-known High St and Online retailer who are seeking a Cyber Security Lead who specialises in Microsoft / Wintel Servers and Virtualisation supporting a UK wide infrastructure.

Objective:

You will support the Head of Information Security in delivering the Information Security service to the global business.

You will lead all Cyber Security Operations function and be the first point of contact for technical information security related matters.

Role Responsibilities:

• Line Managing and mentoring the Sec Ops team.


• Conducting security focussed risk assessments.


• Act as the first point of escalation for identifying security incidents and conduct their investigation.


• Managed vendors.

Key Requirements you will need:

• Vendor Management experience.


• Around 5 years' experience in IT.


• Around 2 years' experience having managed or mentored more junior analysts.


• Experience with configuring and utilising security tooling.

Business Knowledge:

• Knowledge of Retail and eCommerce is of great advantage but is not essential.


• Working knowledge of the Information Security elements of Data Protection regulations.


• Knowledge of the NIST Cyber Security Framework is of advantage.

Call Chandon on 0121 387 5741.

The Game Changers:
At AP+ we're changing the game! We're doing big things, and we can't do it alone. We're part of a big ecosystem, and we know teamwork and passion for our purpose is what will make us successful. We value the unique talents, perspectives, of all our employees. This includes people of all gender identities and sexual orientations, First Nations Peoples, people of all abilities and diverse backgrounds, as well as their families. AP+ brings together Australia’s three domestic payment providers, BPAY Group, eftpos and NPP Australia, into one integrated entity. Bringing these businesses together enables AP+ to create a more competitive and coordinated Australian payments organisation that is strategically placed to respond to the impacts of regulatory and technological change today, and into the future.

The Purpose:

At Australian Payments Plus (AP+), we're on a mission to revolutionise the payments industry and ensure the security of payments infrastructure across Australia. As the Chief Information Security Officer (CISO), you will play a critical role in safeguarding AP+ systems and data from cyber threats.

As the CISO, you will provide strategic and operational leadership for AP+'s information security program. You will develop and implement comprehensive security initiatives, policies, and procedures to protect our systems, networks, and data. You will be responsible for identifying and mitigating risks, managing security incidents, and ensuring compliance with relevant regulations and standards.

In addition, you will drive a culture of security awareness and promote best practices across the organisation. You will collaborate with cross-functional teams to integrate security into the development lifecycle and provide guidance on secure coding practices. You will also stay up to date with the latest industry trends and emerging threats to continuously enhance AP+'s security posture.

As the CISO your key responsibilities will be:

• Cyber Security Management
• Identity & Access Management
• Risk Management
• Security Architecture
• Testing, Compliance & Certifications
• Partner & Vendor Management
• People Leadership

In order to be considered for the CISO role you will need to demonstrate:

• Tertiary qualifications in Computer Science, Information Technology, or a related discipline.  And/or equivalent relevant knowledge and experience. 
• Professional security management certification such as CISM, CISSP or equivalent.
• Robust and proven experience leading and growing security functions in innovative, leading edge and fast paced environments.
• 10+ years’ experience in risk management and information security in a technical environment
• Experience leading, directing and developing technical staff in the execution of security program and project initiatives.
• Experience with contract and vendor negotiations and management including managed services.
• Experience with Cloud computing.
• Experience creating, testing and maintaining business continuity management and disaster recovery plans.
• Effective interpretation of security-related data allows CISOs to detect potential security threats.
• In-depth technical knowledge of cybersecurity tools and concepts, such as intrusion detection systems, firewalls, risk identifying tools and SIEM systems
• Strong understanding of information security, risk, privacy, and regulatory compliance
• Extensive knowledge of risk management techniques.
• Innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams.
• Familiarity with relevant regulations and standards (e.g., PCI-DSS, ISO 27001).

What’s Next:
We know applying for a role can be a nerve-wracking experience, so we endeavor to review applications and plan to schedule screening interviews within the next two weeks. If you are among selected candidates, we’ll be in touch to schedule a phone interview. In any case, we will keep you posted on the status of your application.
We want to remove all barriers to inclusion so if you need advice or support with your application, we’re here to help. Please reach out to recruitment@auspayplus.com.au We also encourage you to let us know your pronouns at any point during the recruitment process.

AP+ are not partnering with Recruitment agencies for this role.

IT Cyber Security Analyst & Team Leader - CISSP or CySA+ or MSc Information Security

Weymouth, Dorset, or London, South East UK or Stoke on Trent, Staffordshire

£50,000pa + Hybrid & Flexi-Working & Training & Certifications Available

Weymouth, Dorset, or London, South East UK, or Staffordshire + Hybrid and Flexible Working as Standard

The Client: Are a well-known High St and Online retailer who are seeking a Senior IT Cyber Security Analyst who specialises in Microsoft / Wintel Servers and Virtualisation supporting a UK wide infrastructure.

Objective: You will Lead 2 x Cyber Security Analysts, giving support to the Head of Cyber Security in delivering the Information Security service to the global business.

You will lead all Cyber Security Operations function and be the first point of contact for technical information security related matters.

Role Responsibilities:

• You will Lead 2 x Cyber Security Analysts, giving support to the Head of Cyber Security
• Act as the first point of action or escalation for the identification of security incidents and their investigation.
• Be responsible for the managed Security Operations Centre (SOC), Network Monitoring and Managed Detection and Response services and associated vendor relationships.
• Offer mentoring, advice and guidance to those in your Team
• Be the subject matter expert for technical security related queries, providing the Security Architect, IT Service and Delivery teams and business stakeholders with authoritative advice and defined security requirements.
• Be responsible for the Security Education and Awareness scheme.
• Ensure Cyber Security campaigns are conducted, and improvements implemented and ensure colleague queries around policies and requirements are appropriately answered in a timely manner.
• Be responsible for the Vulnerability Management process.
• Act on vulnerability information and conduct Cyber Security risk assessments and work with suppliers, partners, and internal teams to ensure security vulnerabilities are identified, assessed, and remediated in good time.

Key Requirements you will need:

• In depth knowledge of Information Security concepts and principles, including cloud security capabilities.
• Experience with configuring and utilising security tooling, including SIEM, EDR, vulnerability scanners, CASB, network scanning, DLP.
• Hands-on IT experience with proven expertise in a previous Information Security role.
• Vendor management experience.
• A relevant intermediate or advanced Information Security based qualification (e.g. CISSP, CySA+, MSc Information Security)
• Ability to critically analyse information and make decisions based on judgement, knowledge, and experience.

Business Knowledge:

• Knowledge of Retail and eCommerce is of great advantage but is not essential.
• Working knowledge of the Information Security elements of Data Protection regulations (e.g. GDPR, The Data Protection Act 2018) is essential.
• Knowledge of the NIST Cyber Security Framework is of advantage.
• Awareness of regulations that affect Retail, such as PCI DSS, is of great advantage but experience of maintaining compliance is not essential.

CISSP or CySA+ or MSc Information Security Certifications will be advantageous.

Call 0121 712 8715 today!

Stay up to date on everything Blackbaud, follow us on Linkedin, Twitter, Instagram, Facebook and YouTube ​

Blackbaud is a remote-first company which embraces a flexible remote work culture.  Blackbaud supports hiring and career development for all roles from the location you are in today!

Blackbaud is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.

To all recruitment agencies: We do not accept unsolicited agency resumes and are not responsible for any fees related to unsolicited resumes.

A notice to candidates: Recruitment Fraudulent Alert: Your personal information and online safety as a candidate mean a lot to us! At Blackbaud and our portfolio of companies, recruiters only direct candidates to apply through our official careers page at https://careers.blackbaud.com/us/en or our official LinkedIn page. Recruiters will never request payments, ask for financial account information or sensitive information like social security numbers, or conduct interviews via Skype.  Anyone suggesting otherwise is not a representative of Blackbaud. If you are unsure if a message is from Blackbaud, please email blackbaudrecruiting@blackbaud.com. 

The starting base pay is $77,700.00 to $104,500.00. Blackbaud may pay more or less based on employee qualifications, market value, Company finances, and other operational considerations.

Benefits Include:

• Medical, dental, and vision insurance

• Remote-first workforce

• 401(k) program with employer match

• Flexible paid time off

• Generous Parental Leave

• Volunteer for vacation

• Opportunities to connect to build community and belonging

• Pet insurance, legal and identity protection

• Tuition reimbursement program

As a Senior Cybersecurity Analyst specializing in risk management, you will play a crucial role in identifying, assessing, and mitigating cybersecurity risks across our organization. You will be responsible for executing risk management strategies, conducting risk assessments, quantifying risks, and collaborating with cross-functional teams to ensure the security of our systems, networks, and data.

What you'll be doing:

• Lead the cybersecurity risk management process, including identifying, analyzing, prioritizing, and quantifying cybersecurity risks based on business impact and likelihood of occurrence.

• Develop and maintain risk management frameworks, policies, and procedures in alignment with industry standards and regulatory requirements.

• Conduct regular risk assessments to identify potential threats and vulnerabilities, and collaborate with stakeholders to address findings.

• Provide guidance and recommendations on risk mitigation strategies, controls implementation, and security best practices.

• Collaborate with internal teams, including IT, compliance, legal, and business units, to integrate cybersecurity risk management into business processes and decision-making.

• Monitor and assess emerging cybersecurity threats and trends, and proactively recommend measures to enhance the organization's cybersecurity posture.

• Act as a subject matter expert on cybersecurity risk management, providing mentorship and training to other analysts and stakeholders as needed.

What we'd like you to have:

• 3+ years in cybersecurity risk management, with a focus on assessing and mitigating cybersecurity risks in complex IT environments.

• In-depth knowledge of cybersecurity frameworks, standards, and regulations (e.g., NIST Cybersecurity Framework, NIST 800-37, FAIR, etc.).

• Prior experience with Risk Management GRC tools (e.g., ServiceNow, Archer, etc).

• Strong analytical skills and ability to effectively prioritize and manage multiple tasks and projects in a fast-paced environment.

• Excellent communication and interpersonal skills, with the ability to convey technical concepts to non-technical stakeholders and collaborate effectively across teams.

• Strong understanding of emerging cybersecurity threats and trends, and ability to stay abreast of evolving industry best practices and regulatory requirements.

Join our team and contribute to building a resilient cybersecurity program that protects our organization's assets, reputation, and stakeholders.

#LI-REMOTE

Stay up to date on everything Blackbaud, follow us on Linkedin, Twitter, Instagram, Facebook and YouTube ​

Blackbaud is a remote-first company which embraces a flexible remote work culture.  Blackbaud supports hiring and career development for all roles from the location you are in today!

Blackbaud is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.

To all recruitment agencies: We do not accept unsolicited agency resumes and are not responsible for any fees related to unsolicited resumes.

A notice to candidates: Recruitment Fraudulent Alert: Your personal information and online safety as a candidate mean a lot to us! At Blackbaud and our portfolio of companies, recruiters only direct candidates to apply through our official careers page at https://careers.blackbaud.com/us/en or our official LinkedIn page. Recruiters will never request payments, ask for financial account information or sensitive information like social security numbers, or conduct interviews via Skype.  Anyone suggesting otherwise is not a representative of Blackbaud. If you are unsure if a message is from Blackbaud, please email blackbaudrecruiting@blackbaud.com. 

The starting base pay is $77,700.00 to $104,500.00. Blackbaud may pay more or less based on employee qualifications, market value, Company finances, and other operational considerations.

Benefits Include:

• Medical, dental, and vision insurance

• Remote-first workforce

• 401(k) program with employer match

• Flexible paid time off

• Generous Parental Leave

• Volunteer for vacation

• Opportunities to connect to build community and belonging

• Pet insurance, legal and identity protection

• Tuition reimbursement program

Job Profile Summary

 

The Information Security Analyst will support the Cybersecurity Business Measurement & Reporting Department in the development and reporting of operational performance and risk reporting.  Specifically, by reviewing, defining and documenting customer request requirements, supporting metric lifecycle management, and supporting operational and senior management reporting, as well as supporting the functions operational process. 

 

KEY RESPONSIBILITIES AND DUTIES:

 

• Handling data warehouse, metric and visualizations request End to End working within an Agile Scrum methodology. Including but not limited to gathering and writing business and functional requirements through customer requirement review sessions.

• Developing effective Agile User Stories from requirements gathering session, testing/validating completed development work, writing User Acceptance/Test Scripts, and obtaining Customer Sign-off through the UAT Process. 

• Ensuring on-time requirement completion for Sprint iterations, and UAT completion for production releases.  

• Serve as a liaison between the customer and the application development team to meet request requirements and expectations.

• Assisting various personnel such as Operational Leads, Data Owners, Technical Support Engineers, Development Engineers, and Project Management resources in developing and finalizing business goals, objectives and achieving expected results. 

• Working in a SQL based data warehouse and a myriad of other Information Technology (IT) systems interpreting from high level business goals the functional requirements from the various systems to produce cybersecurity metrics. 

•Partners with various stakeholders to design, test, and implement data visualizations to effectively and efficiently communicate Cyber risk items to a diverse audience.

 Educational Requirements

• University (Degree) Preferred

Work Experience

• 2+ Years Required; 3+ Years Preferred

Physical Requirements

• Physical Requirements: Sedentary Work

 

Desired Skills:

• Information Security experience
• Tableau Dashboard experience

 

Senior IT Cyber Security Analyst - CISSP or CySA+ or MSc Information Security

Weymouth, Dorset, or London, South East UK or Stoke on Trent, Staffordshire

£45,000pa + £5,000 Car Allowance, Hybrid & Flexi-Working & Training & Certifications Available

Weymouth, Dorset, or London, South East UK, or Staffordshire + Hybrid and Flexible Working as Standard

The Client: Are a well-known High St and Online retailer who are seeking a Senior IT Cyber Security Analyst who specialises in Microsoft / Wintel Servers and Virtualisation supporting a UK wide infrastructure.

Objective: You will support the Head of Information Security in delivering the Information Security service to the global business.

You will lead all Cyber Security Operations function and be the first point of contact for technical information security related matters.

Role Responsibilities:

• Act as the first point of action or escalation for the identification of security incidents and their investigation.
• Be responsible for the managed Security Operations Centre (SOC), Network Monitoring and Managed Detection and Response services and associated vendor relationships.
• Be the subject matter expert for technical security related queries, providing the Security Architect, IT Service and Delivery teams and business stakeholders with authoritative advice and defined security requirements.
• Be responsible for the Security Education and Awareness scheme.
• Ensure Cyber Security campaigns are conducted, and improvements implemented and ensure colleague queries around policies and requirements are appropriately answered in a timely manner.
• Be responsible for the Vulnerability Management process.
• Act on vulnerability information and conduct Cyber Security risk assessments and work with suppliers, partners, and internal teams to ensure security vulnerabilities are identified, assessed, and remediated in good time.

Key Requirements you will need:

• In depth knowledge of Information Security concepts and principles, including cloud security capabilities.
• Experience with configuring and utilising security tooling, including SIEM, EDR, vulnerability scanners, CASB, network scanning, DLP.
• Hands-on IT experience with proven expertise in a previous Information Security role.
• Vendor management experience.
• A relevant intermediate or advanced Information Security based qualification (e.g. CISSP, CySA+, MSc Information Security)
• Ability to critically analyse information and make decisions based on judgement, knowledge, and experience.

Business Knowledge:

• Knowledge of Retail and eCommerce is of great advantage but is not essential.
• Working knowledge of the Information Security elements of Data Protection regulations (e.g. GDPR, The Data Protection Act 2018) is essential.
• Knowledge of the NIST Cyber Security Framework is of advantage.
• Awareness of regulations that affect Retail, such as PCI DSS, is of great advantage but experience of maintaining compliance is not essential.

CISSP or CySA+ or MSc Information Security Certifications will be advantageous.

Call 0121 712 8715 today!

About Us

The Missing Link have been operating in Australia for over 26 years with offices in both Sydney and Melbourne. With over 180+ staff, you will be joining a highly successful team which is set to grow.

Our core offerings include cyber security, hardware and software, resiliency, cloud, communications, infrastructure, consulting services and managed services.

Our Security division is one of the fastest growing Cyber Security businesses in Australia and is split into three service areas:

• Red Team (Security Consulting & Penetration Testing)

• Blue Team (Security Architecture & Engineering)

• Security Operations Centre (SOC)

We're recognised as industry leaders and accredited to the highest levels in the design, delivery, and support of the latest technologies. We partner with market-leading global and local vendors to deliver world-class business outcomes through IT transformation. Today, The Missing Link is one of the most awarded IT companies in Australia.

We have a number of focus areas and specialisation within the SOC, these are:

• Defender: SOC Engineers who are responsible for the proactive management, maintenance and incidents involving security solution software and infrastructure

• Hunter: SOC Analysts who conduct regular hunts through telemetry from various security solutions looking for IOCs and BIOCs

• Watcher: SOC Analysts who triage and investigate alerts from various security solutions but primarily from EDR and SIEM

• Responder: SOC Analysts who lead or contribute to the progression and resolution of Incident Response scenarios
  

The Role

The Missing Link Security Operations Centre provides 24x7 Managed Detection & Response (MDR) support to our clients across a variety of sectors. Day-to-day you will be responsible for the monitoring and triaging of alerts from market-leading MDR technologies, collaborating with our SOC Engineers, Red Team and our clients to develop, test and tune use cases through Purple Teaming exercises.

You will also be proactively supporting our clients and the Senior Security Analysts in responding to security incidents, through log and malware analysis, OSINT and researching the latest zero-day vulnerabilities.

We believe in investing in and developing our people through a variety of training and education programs. When you first come on board, you’ll be given a structured training and development plan that is tailored to you and your previous experiences. This will include a combination of industry qualifications as well as vendor-specific certifications specific to your role.

Essential:

• 1+ years of experience working with systems, networking and security technologies either in an Managed Service Provider, or equivalent role.

• Hands-on security knowledge of Windows/Linux/Unix platforms

• Hands-on experience with one or more SIEM/EDR/VM systems and can demonstrate end to end knowledge of the TDIR Methodology

• In-depth knowledge of the MITRE ATT&CK Framework

• A demonstrated knowledge of IT security controls, OSI Model and TCP IP Stack

Desirable:

• You are naturally curious and a self-starter. Tell us about how you build Cyber Labs and Ranges in your own time, or your latest research project.

• You listen to and follow podcasts and bloggers like Darknet Diaries, Recorded Future, @IT_SecGuru or @TheHackerNews. Tell us what r/ threads you’re currently tracking.

• You have exposure to Vulnerability Assessments or Penetration Testing professionally or through your own personal research. If you’ve started a CEH or OSCP certification, even better!

• Show us how you automate using PowerShell and Python. • You have COMPLETED, not started, certifications such as CompTIA Network+ and Security+ as well as core networking such as Cisco CCNA or CCNP.

A great company culture is very important to The Missing Link. Keeping everyone happy is one of our top priorities.

Here are some of the best bits about working at The Missing Link and some of the ways we try and maintain our staff happiness levels:

• Supportive, collaborative and respectful environment
• Training / mentoring programs
• Regular fun social events
• Diverse range of employee benefits including paid volunteer days
• Great bonus structure
• Free breakfast, drinks and monthly lunches

Role Description:

At FNZ, our purpose is to make wealth management more accessible, bringing easier, fairer and more inclusive solutions to people worldwide. Here in the Global Information Security team, we work to protect the platforms that support investment solutions for over 20 million people.

We are looking for a Security Operations Lead Analyst to join the Security Operations team. You will have knowledge of Information Technology concepts and have 3+ years experience in Security Operations in a commercial environment. You will be excited to develop your knowledge and abilities in a global, complex organisation. You will be able to learn quickly and must be able to show how you develop yourself and your career. You will be joining an experienced team and working to support some of the biggest financial services clients in the world.

Reporting directly to the Head of Cyber Fusion Centre, you will lead a team of analysts responsible for monitoring and responding to security incidents, implementing proactive measures, and ensuring the overall safety and integrity of our systems, networks, and data.

Team Responsibilities:

The team are responsible for:

• Providing high quality and timely response to alerting.

• Shift work covering 24/5 plus on-call weekend work

• Incident resolution and triage – resolve incidents as per agreed procedures and escalate internally to relevant teams to resolve any incidents outwith our remit.

• Stakeholder Communication – Triage incidents and manage stakeholder expectations for incident resolution.

• Post Incident reviews – evaluate the incident management response and recovery effort for major, critical and high priority incidents to provide continual improvement of our incident responses.

Specific Role Responsibilities

• Responsible for the regional Incident response team.

  • Building the team

  • Fostering a great culture

  • Supporting and growing the team members in their career

  • Managing team rotas and absence

  • Knowledge sharing and mentoring

• Incident Management: Lead and supervise a team of security analysts to promptly detect, investigate, and respond to security incidents. Ensure the appropriate escalation procedures are followed when necessary and coordinate incident resolution efforts effectively.

• Lead incident escalation and communication for internal and external stakeholders.

• Use application management software and tools to collect agreed performance statistics.

• Security Operations Center (SOC) Management: Manage day-to-day SOC operations, ensuring that monitoring activities are performed round-the-clock, and shift schedules are organized efficiently.

• Security Incident Response: Develop and maintain an incident response plan, conduct periodic exercises to test the response readiness of the team, and continually enhance the incident response process.

• Team Training and Development: Provide mentorship and training to security analysts, ensuring they are equipped with the necessary skills and knowledge to excel in their roles.

• Security Incident Remediation: Coordinate with IT and infrastructure teams to implement necessary remediation actions following security incidents, including applying patches, updating configurations, or deploying new security measures.

• Triage of alerts from FNZ Group systems

• Lead post Incident reviews, helping to provide a continually improved service for our customers and stakeholders.

• Define Standard Operating Procedures and playbooks to respond to incidents

• Supporting development and enhancement of SIEM detection and playbooks

Experience required:

Primary requirements

• Bachelor’s Degree or higher in Computer Science, Mathematics, Engineering, Physics or other Sciences or equivalent working experience. Degree preferable in either Commerce or IT; (A-B + average) or equivalent;

• Intermediate SQL skills;

• Interest / familiarity with financial markets and products beneficial but not essential;

• Excellent spoken and written English

• Experience of Incident Response (triage, classification, investigation, escalation)

• Knowledge of networking protocols and investigation (capture, Wireshark)

• Knowledge of Operating Systems, Databases and Applications (Windows, Linux, SQL, F5)

• Knowledge of SIEM tools (Splunk, Sentinel)

• Knowledge of EDR tools (Defender, Crowdstrike)

• Knowledge of security concepts (MITRE, Kill-Chain)

• Willing to work in shift patterns

Nice to have:

• Written/spoken German

#LI-CM1

About FNZ

FNZ is committed to opening up wealth so that everyone, everywhere can invest in their future on their terms. We know the foundation to do that already exists in the wealth management industry, but complexity holds firms back. 

We created wealth’s growth platform to help. We provide a global, end-to-end wealth management platform that integrates modern technology with business and investment operations. All in a regulated financial institution. 

We partner with over 650 financial institutions and 12,000 wealth managers, with US$1.5 trillion in assets under administration (AUA).

Together with our customers, we help over 20 million people from all wealth segments to invest in their future.

•        We're changing the game!
•        We're doing big things, and we can't do it alone.
•        We're part of a big ecosystem, and we know teamwork and passion for our purpose is what will make us successful.

AP+ bring together Australia’s three domestic payment organisations into one integrated entity. Operating in the public interest, AP+ focuses on meeting the needs of all payment users and representing the views of a diverse range of stakeholders. BPAY Group, eftpos and NPP Australia continue to operate as distinct brands within a Group Leadership Team structure.

AP+ is intended to create a more efficient and agile payments group, building the competitiveness of Australian domestic payments infrastructure, and delivering significant benefits to Australian consumers and businesses.

Role purpose

• To bring a targeted and disciplined approach to security monitoring and testing, identifying risks, and providing reporting to the technical administrators as well as the business department heads 
• The role works within the Security function, so would require someone who is proactive and analytical with a curious mindset, who can understand and derive data from a number of sources and report on the findings in a number of formats.

Key Responsibilities

• Maintain security monitoring through a range of tools within AP+ such as Qualys, Splunk, Darktrace, Crowdstrike, AWS, Microsoft and others to proactively monitor the security of the environments.
• Being able to analyse, interpret and utilise data to add value to the security function in being proactive on what/why/how trends occur, and present the findings for the head of security to report to the business leaders. 
• Utilising a wide range of tools and work with the security team to automate a range of reports to provide trending and business risk analysis. 
• Understand and keep up to date with the latest news or updates on cyber security and feed that information into the reporting. 
• Work within the security team to promote cyber awareness across the business.

Key Challenges

• Absorb data and produce meaningful and business digestible reports.
• Key scripting or programming knowledge to perform data analysis.
• Strong communications skills particularly in report writing.
• Understand a large data set and derive actionable information from it 
• Gathering and utilising data from numerous tools 
• Upskill in programming languages, ideally Python to automate large workloads. 
• Strong excel, powerpoint skills to present data to a business audience. 
• PowerBI or other data analytic tool skills ideal

• Relevant certifications or equivalent experience in information technology, computer science or a related discipline.
• At least 2-3 year’s experience in an IT role working with technologies.
• Strong data analysis and cyber security knowledge.
• Python or similar data programming , strong excel skills for data management, strong PowerBI or other data analysis tools.
• Strong MS office skills beyond basic usage.
• Strong verbal and written ability.
• Exceptional report writing skills.
• Strong analytical skills and problem solving ability.

We know applying for a role can be a nerve-wracking experience, so we endeavor to review applications and plan to schedule screening interviews within the next two weeks. If you are among selected candidates, we’ll be in touch to schedule a phone interview. In any case, we will keep you posted on the status of your application.

We want to remove all barriers to inclusion so if you need advice or support with your application, we’re here to help. Please reach out to recruitment@auspayplus.com.au. We also encourage you to let us know your pronouns at any point during the recruitment process.

*AP+ are not working with Recruitment Agencies for this role.