As a key member of our Information Technology Security team, the IT Security Analyst is tasked with the responsibility of safeguarding our organisation’s data, digital assets and IT systems. This role involves a dynamic combination of vulnerability management, security monitoring and incident response activities.
The IT Security Analyst will develop and enforce security policies to protect our systems and ensure legal compliance. This technical role requires a proactive approach to cybersecurity, ideal for someone passionate about staying ahead in this field. The role combines hands-on technical and operational tasks with policy maintenance and audit oversight, ensuring a comprehensive approach to maintaining and enhancing our security posture.

KEY REQUIREMENTS:

• Education: A bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field, or equivalent professional experience in these areas.
• Experience: At least 3-5 years of experience in an IT security role with a proven track record in risk management, incident response, and security operations. IT Security experience within a SaaS / Cloud based environment is required.
• Certifications: Industry certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM)
• Problem-Solving Skills: Ability to think analytically and strategically to navigate complex security challenges and provide practical solutions.
• Communication Skills: Exceptional interpersonal and presentation skills, capable of explaining complex security risks and concepts to non-technical stakeholders. Excellent spoken and written English is required.
• Attention to Detail: Meticulous attention to detail with an uncompromising commitment to achieving high standards of data security.

What’s in it for you!

• A massive opportunity for you to develop your skills and knowledge in a supportive environment that thrives on growth and change.
• Competitive salary and benefits (in line with experience)
• Individual performance bonus

• Hybrid working model, 2/3 days in our London Offices and at homeCurious, open culture, with teams collaborating across geographies

• Living our Values at Orbus
  Trust: We build trust across our people, customers and partners through honesty, transparency and communication.
  Empowerment: We empower our customers and our people with growth, development and experience
  Clarity: We provide clarity and sense of purpose, focused on helping everyone achieve success and forging a clear vision of the future
  Harmony: We work as one team, collaborating closely so we can sustainably change and grow
  Find your place at Orbus - We’re a diverse and inclusive workplace that promotes a sense of belonging allowing all of our people to bring their whole selves to work every day.
  Recruitment Companies - Thank you for your interest in our roles – we do not accept unsolicited CVs from recruiters or employment agencies. We will not consider or agree to payment of any referral compensation or recruiter fee relating to any unsolicited CVs.
  Offers of employment will be dependent on satisfactory references and background checks

• Threat Intelligence and Security Monitoring: Utilise advanced security tools to continuously monitor and analyse the organisation’s networks and systems. Stay updated with the latest security and technology trends to anticipate security challenges.
• Vulnerability Management: Lead initiatives to identify, evaluate, and prioritise vulnerabilities in network infrastructures, applications and integrated systems. Collaborate with all internal and external IT functions to ensure security patches and controls are effectively applied.
• Incident Response and Forensics: Actively participate in the investigation of any possible security breaches and assist with related compliance matters. Undertake forensic analysis to identify the root cause and implement corrective measures to prevent future incidents. Assist in further developing an effective security incident response strategy.
• Compliance and Risk Assessment: Ensure that the organisation adheres to the necessary compliance regulations regarding Information Security and data privacy. Assist in performing scheduled risk assessments and audits, recommending modifications in compliance, technical and operational processes.
• Policy Development and Implementation: Create, manage, and roll out comprehensive IT security policies, guidelines and procedures to ensure a secure operating environment. Educate and train staff on compliance and security measures.
• Stakeholder Engagement: Work closely with various stakeholders, including management, IT Support and external partners, to enhance the security posture of the organisation. Present complex security issues and related solutions to stakeholders at all levels within the organisation.