PERMANENT OPPORTUNITY

The Cyber Exposure Management Analyst will be required to provide expert knowledge to implement our Exposure Management efforts, ensuring our organization proactively identifies, assesses, and mitigates security risks.
This role requires expertise in attack surface management, continuous security control validation, and continuous monitoring to strengthen our security posture. This is in support of the delivery of the Security Mission.

QUALIFICATIONS, TRAINING AND EXPERIENCE

• A business or technology tertiary qualification (or equivalent experience
• Vendor related certifications are considered beneficial but not essential; examples include: CEH, Cloud Analyst or equivalent preferred.
• You have an insight of complex technical issues and managing them within a fast-paced business environment.
• You have an understanding of network security, authentication systems, application security, Vulnerability, Risk Management, Identity, as well as Cloud and Network Security concepts and Security frameworks.
• You are familiar with cloud security, compliance framework, NIST/ISO standards and regulatory requirements.
• You have ability to work under little supervision and/or independently in response to general work direction.
• 4-5 years or more in Security related roles; experience in financial services is an advantage.
• Experience in working on cloud platforms (Azure, Google Cloud Platform, etc.)
  At Bupa, we are striving to create and sustain a safe and inclusive workplace. We welcome applicants from all cultural backgrounds, genders, and abilities. If you require any adjustments to participate in our recruitment process, please let us know at the time of your application

• Exposure Management: Identify, assess, and manage BUPA’s exposure to potential threats.
• Vulnerability Management: Co-ordinate the vulnerability management process and conduct regular meetings with operational stakeholders • Risk Assessment & Analysis: Conducting security audits to ensure adherence to industry standards and regulatory requirements.
• Threat Monitoring & Detection: Continuously monitoring networks and systems for vulnerabilities and potential cyber threats.
• Incident Response & Recovery: Analyzing security alerts, investigating breaches, and implementing remediation strategies.
• Collaboration & Training: Collaborate with product vendors, product owner, engineering teams and other key internal stakeholders, to determine improvement opportunities.
• Compliance & Governance: Ensuring adherence to industry regulations and cybersecurity best practices