Senior Cyber Security Analyst

Job overview

Support the Head of Cyber Security with regulatory requirements, such as NIS CAF Develop policies and procedures to reduce the likelihood and impact of Cyber Incidents Monitor security tools for incidents and events, responding appropriately Manage vulnerabilities providing expect advice and guidance on remediation Report on Cyber metrics, Key Performance Indicators (KPI’s) and Service Level Agreements (SLA’s) .

The ability to speak Welsh is desirable for this post; Welsh and/or English speakers are equally welcome to apply.

Main duties of the job

To monitor Cyber Security Systems, respond to Cyber Incidents and develop policy, processes and procedures to reduce the likelihood of a Cyber Security incident. To undertake vulnerability scanning, the monitoring of Cyber Security Systems and work with third parties to review compliance with best practice.

To deputise for the Senior Cyber Security Product Specialist where appropriate. To act as an escalation point for Cyber Security incidents and provide specialist advice and knowledge to support the service operations centre as well as developing Cyber Security training packages for both the team and the organisation.

To adhere to the Cyber Security professional code of conduct and keep up to date with legislation and national policies, as well as assessing security advisories from third parties. To undertake other relevant duties as agreed with the Senior Cyber Security Product Specialist, and Head of Cyber Security commensurate with the banding of this role. Assist in the Cyber Security Strategy development and delivery, affecting whole organisation.

To performs root cause analysis and lessons learned on all Cyber Security Events. To work with external auditors to ensure compliance of Cyber Security Systems Implements recommendations in line with timescales agreed with auditors. Monitors internal and external threat environment.

Detailed job description and main responsibilities

Essential

• Educated to Degree level (preferably Cyber Security) or equivalent and a recognised qualification in Cyber Security e.g. CISMP, CompTIA or equivalent demonstrable level of work experience and knowledge
• ITIL Foundation
• Evidence of Continual Professional Development
• Good understanding of Cyber Security best practices and terminology
• Knowledge of Desktop, Server and Mobile devices and operating systems as well as IoT devices
• Knowledge of Information Assurance and Cyber Security standards and certifications
• Knowledge of laws and regulations relating to Cyber Security
• Knowledge of common Cyber Security tools and solutions
• Good understanding of security monitoring and alerting solutions
• Good understanding of Cyber Security professional code of conduct
• Good understanding of the Incident Response lifecycle
• Good understanding of vulnerability scanning and penetration testing methodologies
• You may be required, at times, to work outside of standard working hours.
• You will also be expected to join on an out of hours, on-call escalation rota.

Desirable

• Professional qualification or membership in cyber security (ISC2, BCS, NCSC, Tiger, CHECK, CREST, CompTIA etc.)
• Application of Cyber Security in a healthcare environment
• Good knowledge of one or more specialist areas such as compliance, penetration testing, or incident response
• Delivery of training to technical and non-technical staff
• Report writing
• Procedure development

Experience

• Experience within Cyber Security, underpinned by theory
• Experience of Cyber Security monitoring of SIEM systems
• Evidence of Cyber Security or other relevant work outside formal training or employment (voluntary, research, academia, social media etc.)
• Relevant experience working in Cyber Security Skills and Attributes
• Excellent communication and interpersonal skills, verbal and written and reporting skills
• Ability to produce good quality documentation
• Able to deal effectively with staff, customers, and suppliers at all levels
• Good organisational skills
• Good computing/keyboard skills Other
• Must be able to travel within geographical area
• May be required to work hours flexibly on occasions to meet service needs
• You will be required to work as part of an on-call escalation.

You will be able to find a full Job description and Person Specification attached within the supporting documents or please click “Apply now” to view in Trac.

Applicant requirements

Welsh language skills are desirable