WHO WE ARE

We are an organisation that exists to drive progress. That’s the “red thread” that connects everyone at The Economist Group (TEG). Our businesses share a devotion to innovation, independence and rigour in their fields of expertise. We empower people to understand and tackle the critical challenges and changes facing the world. Our analytical rigour, global expertise and evidence-based insights enable individuals and organisations to make sense of these shifts and chart a course through them.
We deliver analysis and insights in many formats to subscribers and clients in 170 countries through our four businesses, The Economist, Economist Impact, Economist Intelligence and Economist Education, which uphold our global reputation for excellence and integrity.
The Economist Group is the leading source of analysis on international business and world affairs. We deliver our information through a range of formats, from newspapers and magazines to conferences and electronic services.
The Information Security team operates the Information Security Program and is responsible for the standard of information security across the Group. We define and implement our security strategy and mitigation activities across our brands. We work with business units to ensure that the confidentiality, integrity and availability risks that they are exposed to are clearly understood and appropriately managed.
The Cyber Security Analyst is a member of the Information Security team and helps us maintain the security of our cloud infrastructure. As an Analyst, you will be responsible for monitoring, analysing, and identifying potential security threats to our cloud-based systems. You will work closely with other IT teams to ensure the confidentiality, integrity, and availability of our cloud-based data.

you’ll do:

• Monitor and analyse cloud infrastructure security logs to identify potential security threats and vulnerabilities.
• Develop and implement security policies, procedures, and standards for cloud-based systems.
• Collaborate with IT teams to ensure security best practices are followed throughout the cloud infrastructure.
• Implement and configure cloud security tools and solutions to protect cloud-based data and systems.
• Collaborate with our Managed Detection Response (MDR) provider to assess and respond to security threats against our customer-facing and staff-facing platforms and services and drive continuous improvement of our capabilities
• Deliver security awareness training as required and ensure all staff are properly equipped with the knowledge to defend our Group from phishing, social engineering attacks and other common cyber threats
• Respond to security-related queries from all parts of the Group, tailoring your response and advice depending on the scenario
• Assist in application security testing activities and ensure that testing results are communicated effectively to stakeholders and remediation is properly prioritised
• Identify and communicate at all levels (evangelising) relevant security threats to the Group’s application platforms
• Enhance the overall posture in application security and drive cultural change in a collaborative manner
• Participate in incident response, from discovery through to recovery, lessons learned and remediation
• Ensure our business operations are compliant with relevant security standards and regulations such as PCI DSS SAQ-A

Who you are:

• Holds a bachelor’s degree in Computer Science, Cybersecurity, or a closely related discipline
• Proven background in cyber security or a related field with a focus on cloud security
• Familiarity with cloud computing platforms (AWS, Azure, Google Cloud, etc.).
• Knowledge of security standards such as ISO 27001, NIST, and SOC2.
• Experience with security tools such as vulnerability scanners, intrusion detection or prevention systems, and SIEM solutions.
• Experience with Vulnerability Management
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration skills.
• Ability to work independently and as part of a team.

• Monitor and analyse cloud infrastructure security logs to identify potential security threats and vulnerabilities.
• Develop and implement security policies, procedures, and standards for cloud-based systems.
• Collaborate with IT teams to ensure security best practices are followed throughout the cloud infrastructure.
• Implement and configure cloud security tools and solutions to protect cloud-based data and systems.
• Collaborate with our Managed Detection Response (MDR) provider to assess and respond to security threats against our customer-facing and staff-facing platforms and services and drive continuous improvement of our capabilities
• Deliver security awareness training as required and ensure all staff are properly equipped with the knowledge to defend our Group from phishing, social engineering attacks and other common cyber threats
• Respond to security-related queries from all parts of the Group, tailoring your response and advice depending on the scenario
• Assist in application security testing activities and ensure that testing results are communicated effectively to stakeholders and remediation is properly prioritised
• Identify and communicate at all levels (evangelising) relevant security threats to the Group’s application platforms
• Enhance the overall posture in application security and drive cultural change in a collaborative manner
• Participate in incident response, from discovery through to recovery, lessons learned and remediation
• Ensure our business operations are compliant with relevant security standards and regulations such as PCI DSS SAQ-