Cyber and Information Security Analyst
This is a Permanent, Full Time vacancy that will close in {x} days at {xx:xx} BST.
The Vacancy
The Role
This is a new role within the Information Security team reporting into the SOC Manager. A main purpose of the Cyber and Information Security Analyst is to support the protection of our organisations IT infrastructure, networks, and data from cyber threats. Within this role, you will assess security risks, implement proactive measures, monitor systems for security breaches and respond to cyber incidents.
Key Priorities
Security Monitoring & Incident Response
- Monitor our security tools for any potential security threats (CTI).
- Respond and investigate incidents escalated by the SOC.
- Collaborate with IT teams to remediate vulnerabilities and incidents.
Risk Assessment & Compliance
- Conduct regular security assessments to ensure security controls are enforced and working as expected.
- Ensure compliance with industry best standards and regulations e.g., ISO 27001, GDPR.
- Assist in security audits and compliance reporting.
Security Architecture and Implementation
- Provide assistance in reviewing and implementing security solutions such as firewalls, endpoint protection, and identity and access management.
- Assist in identifying and implementing secure configurations for network and systems (security hardening).
- Assist in developing secure software and cloud security best practices.
Policy Development and Awareness
- Develop and update cyber and information security policies, standards, procedures, and best practices.
- Conduct and create security awareness training or articles for employees.
- Promote a strong cybersecurity culture within the organisation.
Knowledge, skills and experience
- Experience using a range of security technologies including firewalls, web proxies, secure email gateways and DLP solutions.
- Strong communications skills to effectively collaborate with cross-functional teams and communicate complex issues to non-technical stakeholders.
- Experience of one of more EDR solutions such as Microsoft Defender or SentinelOne (desirable)
- A good understanding of attacker tactics, techniques and procedures including experience of the Mitre ATT&CK framework.
- Experience of Vulnerability Management and Vulnerability scanning tools such as Tenable, Rapid7 or Qualys.
- Experience of one or more SIEM solutions, including Azure Sentinel.
Desirable
- Cybersecurity relevant certification from CompTia, SANS, GIAC or ISC2.
- Microsoft Certified Security Operations Analyst Associate or similar qualification.
Working at the FSCS
At FSCS we are purpose driven and committed to delivering an exceptional service and results for our customers.
We have invested greatly in a flexible people offering that we’re proud of, that our employees love and that supports and promotes diversity, inclusion, and overall wellbeing. Key benefits include:
- Employer pension contributions from 9%+ dependant on your contributions and length of service
- Life assurance, income and critical illness protection
- Private medical and dental insurance
- EAP and Virtual GP
- 26 days annual leave + bank holidays and the option to sell 5 or buy up to 9 additional days per annum to suit your lifestyle
- Enhanced Maternity, Paternity and Adoption leave – 6 months full pay
- Additional discounts and options to earn rewards to spend at your choice of retailer
To Apply
Use the Apply Now button to apply with your CV.
We are happy to consider any reasonable adjustments that candidates may need during the recruitment process, and you will be asked whether you require any during your application. If there are additional options you’d like to request, please contact recruitment@fscs.org.uk. We also offer reasonable adjustments on the job.
About Us
For the past 21 years, FSCS has been getting customers of failed authorised financial services firms back on track.
Our strength is in our numbers. Since 2001, we have helped 6.5m customers and paid back £26bn in compensation. Over the years we have continually strived to be better, faster, and more empathetic to our customers’ needs in an ever more complex financial world. Our people have worked together to make sure we can offer protection and reassurance every step of the way, even during the toughest of times over the last two years. FSCS is an organisation that makes a difference, and in which our people truly make a difference.
We have grown from modest beginnings in 2001 to helping customers during historic events such as the 2008 banking crisis and supporting vulnerable customers during the pandemic. As a result of this success, FSCS has become increasingly respected, insightful, and influential in the regulatory eco-system. It is an exciting time in our journey as we now have an opportunity to play a bigger role in breaking the cycle of rising consumer harm and costs; by being part of a system that is about prevention rather than cure.
Our Strategy
What we are aiming for
We shall respond to large and complex firm failures, whilst maintaining our seven-day pay-out for savers in banks, building societies and credit unions. We will actively contribute to increasingly effective resolution when firms fail.
Why this matters
FSCS needs to contribute to public confidence and financial stability by being ready to respond when called upon across the full range of protected products.
Our approach
- Maintain well-tested contingency plans, backed by necessary capabilities and robust customer information.
- Collaborate with industry to improve the customer information we rely on for payouts.
- Improve our ability to respond quickly to investment and insurance failures.
- Work with industry and regulators to improve resolution arrangements.
What we are aiming for
FSCS is known and trusted for protection that puts people back on track through outstanding customer experience.
Why this matters
Customer expectations are rising. The service our customers receive must meet their expectations in terms of speed, accessibility and ease of use, in order to maintain consumer trust and confidence.
Our approach
- Exploit digital technology to create the service our customers expect, at lower cost to our levy payers.
- Improve the speed of our service by eliminating time and process inefficiencies, particularly with third parties.
- Exploit our new strategic partnership - by drawing on our partner's expertise, scale and experience.
- Provide continuity of cover for policyholders in failed insurance companies.
What we are aiming for
We shall raise awareness of FSCS protection across all of the products and services we protect, particularly retirement savings products.
Why this matters
Awareness of, and trust in, FSCS protection maintains confidence in a crisis. Awareness also helps to inform people's choices by increasing their confidence in buying protected services and understanding the risks of unprotected products.
Our approach
- Partner with the industry to raise awareness of FSCS protection across all protected products and services, focusing on retirement savings initially.
- Engage with consumers and provide information to help people understand protection and make informed decisions.
- Encourage customers of failed firms to come directly to FSCS with their claim.
- Work with our stakeholders to provide joined-up and easy to access information about FSCS protection.
What we are aiming for
We shall collaborate with the regulators and industry to prevent future failure and to reduce future compensation costs.
Why this matters
FSCS compensation costs are rising fast - we project that compensation may rise from £405 million in 2017/18, mainly driven by escalating pensions claims. These costs put pressure on firms' finances and are passed on to consumers.
Our approach
- Commit to joint action with the regulators and industry to identify and address the root causes of mis-selling and other conduct issues which drive failure and compensation costs.
- Ensure consumers are alerted more quickly to vulnerabilities and risks as they emerge.
- Work with our partners to improve co-ordination across government, industry and regulators, ensuring insights and intelligence are generated and acted on.
- Feed back lessons learnt as a creditor and from recoveries activity, including working with the insolvency and insurance markets.
- Develop FSCS' own capability to provide actionable intelligence.
Documents
Alternatively, please sign in with...
Published
Not PublishedClosing
in X days