We are currently recruiting a Cyber Security Analyst based in Abingdon. Temp to Perm position.<\/p>\n
The Security Departed is to provide an all aspects of protective security advice and assurance to the CNC, this holistic approach to protective security requires ever closer collaboration between departments, the Cyber Security role is a advice and assurance role to ensure the appropriate tools and audits are used to determine the actual state and maturity of Cyber Security in the CNC, so that remediation actions can be prioritised, and that a true reflection of the maturity can be provided to the Executive.<\/p>\n
The Cyber Security Analyst is a critical role which will support the CNC to enable a greater understanding of how it can better protect itself against the increasing risk of cyber-attacks. This role will provide the appropriate support to the organisation to enable effective risk management and mitigation, guidance and assurances for the Senior Risk Information Officer (SIRO). This role is required to assess the Cyber Security risks that are faced by CNC, helping design and build secure solutions to protect against cyber-attack. Cyber Security is increasingly part of the work undertaken right across the business. The role will also be required to investigate and analyse all aspects of Cyber Security and threats against the businesses. Managing the CNC identified Cyber Security framework to ensure the maturity of Cyber Security within the CNC.<\/p>\n
Role & Responsibilities:
\n\u2022 No direct staff responsibilities.
\n\u2022 No budget responsibilities but needs to be aware of the budgetary process and work within the parameters of relevant budget areas.
\n\u2022 The role impacts on both police officers and staff, across the entire organisation, providing accurate and timely responses to queries and considered advice and guidance on Cyber Security issues.
\n\u2022 To develop strategies and plans law regulatory requirements and expectations to enforce security requirements and address identified risks.
\n\u2022 Lead, manage and be accountable for the overarching Cyber Security function across the CNC, working with staff at all levels.
\n\u2022 To report concerns about residual risk, vulnerabilities, evaluate and implement all-source intelligence information flows regarding new threats, risks and vulnerabilities and other security exposures, including misuse of information assets and non-compliance and recommending updates to security protection measures as appropriate.
\n\u2022 Providing accurate, researched advice and guidance, across the organisation, to enable critical decision making regarding Cyber Security in both an operational and Information Systems environment. Keep current with emerging trends, responsible for identifying risk reduction strategies and the costs associated with them
\n\u2022 Design and develop continual Cyber Security improvements and provide monitoring to ensure that policies, procedures and controls are effective. Write and amend any policy, procedures and technical standards where required
\n\u2022 Support the monitoring of compliance of information security controls which maintain the confidentiality, integrity, availability of the information systems and data, provide advice on protective monitoring, forensic vulnerability scanning and malware analysis, capturing information and developing\/implementing toolsets to produce metrics, reports, dashboards and alerting
\n\u2022 Manage the framework identified to demonstrate assurance of CNC Cyber Security compliance.
\n\u2022 Support the Security Manager and the Head of IT, in terms of planning, managing and invoking critical security policies, working practices and cultural changes across the organisation.
\n\u2022 Support the IT department with the management of the required regular security audits (Infrastructure) including Pen Testing, Network Analysis, Vulnerability Analysis, Exploitation Analysis, perform risk assessments and analyse the result of audits (performed by other groups) to produce recommendations of acceptable risk and risk mitigation strategies.
\n\u2022 Providing advice and guidance on the application and operation of elementary physical, procedural and technical security controls.
\n\u2022 Provide advice and support the management of Cyber Security risks regarding Infrastructure and software implementations.
\n\u2022 Manage and liaise with partners and 3rd party suppliers, evaluating information security levels of products and services in accordance with Policy, Standards, Procedures and guidelines required by N list and PASF.
\n\u2022 Manage and ensure our 3rd parties as distinct business areas are audited in line with our agreed policies. Maintaining the relationship with Security vendors of third parties.
\n\u2022 Support the development of Cyber Security risk register, ensuring that all security risks are identified and appropriately managed in line with agreed tolerance levels in accordance with CNC guidelines.
\n\u2022 Assist the Security Manager with the resolution of Information Security incidents and work to define and implement corrective actions where non\u2013conformities have been identified.
\n\u2022 Provide support and advise on accreditation documents and accreditation plans, security architecture, risk discovery and assessment documentation, security architecture analysis, security design, risk management documentation, security plans and security cases as required.
\n\u2022 Providing support and advice to ensure that the CNC maintains compliance with the required standards, such the Public Services Network PSN and\/or similar Code of Connections
\n\u2022 Systems owner for the PSD, Security Departments and organisations were applicable security applications.
\n\u2022 Provide Cyber Security education and briefings.
\n\u2022 Support the Security Manager in developing and maintaining a security culture
\n\u2022 Be the CNC Crypto Custodian ensuring compliance with applicable cryptographic requirements<\/p>\n
Requirements:
\n\u2022 Demonstrable previous experience within protective security including investigative, and security education i.e. a proven security background before specialising within the Cyber security field
\n\u2022 Network Analysis; Host Forensics Analysis; Malware Analysis
\n\u2022 User investigations; Incident Response experience
\n\u2022 Knowledge of different threat actor groups and their characteristics
\n\u2022 Experience of utilising threat intelligence sources
\n\u2022 Experience of developing in-depth technical investigations
\n\u2022 Experience with Network sensors
\n\u2022 Has a working understanding of common Intrusion Analysis models and can apply them to enhance their analysis or reporting?
\n\u2022 In depth knowledge of the \u2013
\no HMG Security Policy Frame work
\no Critical Security Controls
\no NCSC
\n\u2022 Preferred: Accredited or Certified in any or all of the following \u2013
\no Certified Information Security Manager (CISM)
\no Certificate in Information Security Management Principles (CISMP)
\no CISSP (Certified Information Systems Security Professional)
\no ISO 27001 Internal Auditor
\n\u2022 Significant knowledge of Microsoft networking products
\n\u2022 Significant knowledge of Ethernet networks and IP protocols
\n\u2022 Technical Ability to rapidly learn and put that learning into practice is critical
\n\u2022 Ability to write reports and management presentations
\n\u2022 Ability to work under pressure
\n\u2022 Works autonomously under general direction
\n\u2022 Communicates cyber security analysis results to technical and non-technical management\/governance stakeholders
\n\u2022 Facilitating collaboration and decision making where necessary
\n\u2022 Skills in both verbal and written communications
\n\u2022 Ability to communicate with confidence at all levels in an organisation
\n\u2022 Ability to communicate extremely technical information such that non-technical individuals can understand it at a high level<\/p>\n
Apply online or contact Lloyd at Peel Solutions for more information.<\/p>\n","protected":false},"excerpt":{"rendered":"
We are currently recruiting a Cyber Security Analyst based in Abingdon. Temp to Perm position. The Security Departed is to…<\/p>\n","protected":false},"author":1,"featured_media":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","jobpost_category":[],"jobpost_job_type":[69],"jobpost_location":[],"_links":{"self":[{"href":"https:\/\/www.policejobs.co.uk\/index.php?rest_route=\/wp\/v2\/jobpost\/262"}],"collection":[{"href":"https:\/\/www.policejobs.co.uk\/index.php?rest_route=\/wp\/v2\/jobpost"}],"about":[{"href":"https:\/\/www.policejobs.co.uk\/index.php?rest_route=\/wp\/v2\/types\/jobpost"}],"author":[{"embeddable":true,"href":"https:\/\/www.policejobs.co.uk\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.policejobs.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=262"}],"wp:attachment":[{"href":"https:\/\/www.policejobs.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=262"}],"wp:term":[{"taxonomy":"jobpost_category","embeddable":true,"href":"https:\/\/www.policejobs.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fjobpost_category&post=262"},{"taxonomy":"jobpost_job_type","embeddable":true,"href":"https:\/\/www.policejobs.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fjobpost_job_type&post=262"},{"taxonomy":"jobpost_location","embeddable":true,"href":"https:\/\/www.policejobs.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fjobpost_location&post=262"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}