Security Assurance and Response Analyst

at  Zellis

SKILLS & EXPERIENCE

Critical competencies:

• Recognised qualification in relevant technical discipline, or the equivalent combination of education, professional training or work experience in a similar role.
• Understands current and emerging Security practices and standards, including ISO27001:2013/2022, CSA, Cyber Essentials, and NIST principles.
• Understanding of emerging technologies and general network and infrastructure knowledge.
• Cyber-security knowledge across multiple practices, including Threat Management, Security Operations, and Testing.

Essential skills / behaviours:

• Excellent communication skills.
• Strong team player.
• Ability to take ownership of issues, be pro-active and take accountability.
• Ability to be creative, to consider the art of the possible, the costs of implementation, and the nature, scope, context, and purposes of processing, balanced against the varying likelihood and severity of risk.
• Highly effective, can demonstrate the ability to ‘make It count’ and ensure that actions create positive outcomes.

As Security Assurance and Response Analyst, you’ll support the Security team in all aspects of Security Assurance and Security Incident Response to protect the services and data of our organisation and customers against unauthorised use, disclosure, modification, damage, and loss. You’ll be responsible for developing and implementing security measures to protect information assets from security threats and to respond to security incidents. The role will require excellent analytical and investigative skills, along with a good working knowledge of Information Security practices.

Your key responsibilities will include:

• The development of security controls, policies, standards, and guides.
• Threat modelling and data flow mapping.
• Advising the business on security control deployment and general security requirements.
• Internal security control assessments.
• Security control assessments of suppliers and other third parties.
• Security risk assessments and production of risk collateral.
• Audit and certification activities.
• Security Incident response, including investigation and evidence gathering, and reporting on Information Security Incidents.
• Managing security related issues, ensuring that issues are reviewed, assigned, monitored, and progressed appropriately.
• The production and reporting of security metrics.
• The creation, maintenance, and delivery of security awareness training for the organisation.
• Supporting client-facing commercial engagements in relation to the various aspects of our information security posture.
• Assisting with the day-to day running and monitoring of Information Security Systems and tooling as needed.
• Assisting in all aspects of Security projects and service improvements as required.