Operational Security Analyst - £34304 - £43434 - Remote working

This job has now expired please search on the home page to find live IT Jobs.

The role holder is part of a small team that is responsible for mitigating the University's operational IT Security risk responsibilities for the team include, reporting on and mitigation of vulnerabilities within the IT estate, the detection and initial investigation of suspicious activity from analysis of system log files and improving awareness of the IT Security agenda within operational IT teams.Client DetailsMy client is a world leading research institution which is based on a campus that provides top quality academic, social and cultural facilities to over 17,000 students. They are home to nearly 3,000 scientists working in several world ranked institutions and a world leading centre for environment, health and plant science research. Staff and students come together from different fields to learn, innovate, collaborate and help create a better future.DescriptionOperational Security Analyst - £34304 - £43434 - Remote working Main Responsibilities Each member of the team will have primary responsibility for at least one of these areas, in addition to supporting other members of the team in the areas they are each responsible for. It is expected the role holder will be the technical expert in the area(s) where they have responsibility and they would be expected to develop a technical roadmap, procurement and develop the required hardware/software and design/develop the service. Universal Security Log Management Ensuring all appropriate log data is sourced from across the IT estate. Access to this data will include working with other operational teams as they will have the required expertise in data extraction. Detailed responsibilities include:Manage the digestion of log data from source systems into central log management.Manage the processing and correlation of system logsMaintain roadmap for future processing of logs to maximise coverage and work with other operational teams to create a plan. IT Security Monitoring and Alerting Ongoing monitoring of security log data in order to discover suspicious activity:Development of scripts and rules to highlight events needing investigationCreate alerts/incidents of suspicious activity for further investigation.Collaborate in the maintenance and development of the University's IT security monitoring systems (with the Information Security and Architect teams). Incident triage and management Leading the initial triage and initial investigation of suspicious activity:Process alerts and perform triage, so that security incidents are appropriately identified.Initial management of incident investigations and either bring these to a conclusion or hand over of the most serious incidents to the Information Security team. Training & Awareness Delivery Maintain and improving awareness of cyber-security:Maintain training and awareness programme plan for delivery primarily to IT and by exception across the University.Work with relevant parties for delivery of specific training. Patch Management Monitoring and reporting on the overall patching status of IT systems across the IT estateOverall responsibility for the patch management processWorking with IT Systems owners to ensure and maintain regular patching of all IT systemsCreate summary reports for senior management, including the Director of IT and IT Leadership Team on the overall patch status Vulnerability Management Mitigating the risks associated with system updates and patches across the IT estate:Overall responsibility for the vulnerability management process and collaboration with other operational teams in the collection of vulnerability data.Report vulnerabilities to operational teams and others, and work collaboratively to create a plan to address.Create summary reports for senior management, including the Director of IT and IT Leadership Team. GeneralResponsible for system design, selection and procurement of new specialist systems or services to support this area. This includes upgrades and maintenance of existing systemsBuilding an effective network within the IT teamsThe role holder will report to the Operational IT Security Manager who will set and monitor objectives. It is expected that there will be regular meetings to assign work and feedback on progress. The role holder will be expected to work independently on agreed targets, ensuring that deadlines are met.The role holder will be expected to make decisions within the assigned areas of responsibility; the role holder will have a significant contribution to decisions about the future strategy for Information Technology.ProfileOperational Security Analyst - £34304 - £43434 - Remote working

First degree (or equivalent qualification) or equivalent experience.

Membership of an appropriate professional organisation.

Information security certification/qualification.

Previous experience

Demonstrable experience of managing IT security monitoring systemssuch as SIEM, enterprise log collection, vulnerability scanning

Demonstrable experience of managing organisational compliance matters.

Demonstrable experience of managing information security matters (or related functions such as IT audit or risk management).

Previous experience of training course design and delivery.

Previous experience of procedure design and implementation.

Technical/professional skills

Ability to assimilate/learn complex compliance regimes.

Ability to configure, implement and maintain an IT security monitoring system.

Expert knowledge of network protocols and network/server operating systems

Expert knowledge of software exploits and vulnerabilities.

Ability to identify, analyse and process information security incidents.

Personal skills and attributes

Ability to work in confidential areas and deal with sensitive information.

Strong written and oral communications skills in English language.

Strong presentation skills

Strong negotiation skills.

Analytic and problem-solving skills.

Ability to work independently and within a small team.

Flexible approach to work, including occasional out of hours work.Job OfferOperational Security Analyst - £34304 - £43434 - Remote workingNorwich /remote workingPublic Sector and government***Applications for this role will close as of midnight on 17.10.21***