Senior Security Analyst

at  Oversight Board UK

The Oversight Board makes binding and independent decisions about the most challenging content issues on Facebook and Instagram. Members of the Board include Helle Thorning-Schmidt, former Prime Minister of Denmark, Tawakkol Karman, Nobel Peace Prize winner, Michael McConnell, Director of Stanford’s Constitutional Law Center, and many other diverse leaders and thinkers from around the world. The Board issued its first decisions in January 2021.
The Oversight Board Administration is the team of full-time staff who support Board Members in carrying out their duties. The Administration has a presence in London, San Francisco and Washington, D.C., and operates with a global scope.
You can learn more about the Board at www.oversightboard.com.

Skills & Experience

• Minimum of 5 years’ experience in a cyber security position
• CRISC, CISM Qualifications or equivalent preferred
• Strong technical background in security controls / operations, system, network security and security frameworks such as SOC, NIST, ISO27002, CIS.
• Expert understanding of the elements of cyber malware-space. Specifically, key threat actors and their motivations, attack types, routes of attack, services, and tools.
• Extensive experience of Threat Intelligence, Anomaly Detection and Response, Data Leakage Prevention, Intrusion Analysis and SIEM solutions.
• Experienced working with, and enabling organisations heavily invested / investing in cloud-based technologies.
• Previous relevant experience of working within an international and complex professional services, start-up or highly regulated industry would be an advantage.
• Strong analytical and problem-solving skills with ability to balance multiple priorities and meet deadlines, adjust to changing priorities.
• Identify and drive opportunities to further enhance the security posture of the OSB.
• Experience of working in a Security Operations Centre or partnering with / working for a Managed Security Service Provider would be an advantage.
• A hands-on, forward thinker, with a flexible mindset and ability to work in a fast-moving environment that embraces autonomy and is accountable for results

Joining the Oversight Board Administration is a chance to be part of an organization which is leading on some of the most prominent and challenging issues facing the tech industry and society.

Reporting to the Chief Security Officer, the Senior Security Analyst will be responsible for:

• Support the delivery of the Third-Party Risk / Vendor Management process including managing assessments and tooling.
• Play a key role in supporting the Cyber Intelligence, Threat Detection, Crisis Preparedness and Response, Penetration Testing and Vulnerability Management efforts at the OSB.
• Support operational workflows by performing risk-based security reviews of operational systems, applications and third-party integrations.
• Engage with Technology colleagues and relevant partners to realise the full potential of the OSB’s Security Operations capabilities.
• Leverage a mix of technologies (detection and prevention), processes and human capital to ensure emerging, new, and existing cyber security threats to the organisation are managed appropriately.

Responsibilities will include:

• Monitor external intelligence sources to research and evaluate emerging cyber security and technology developments, threats and vulnerabilities of relevance to the OSB, and determine how to manage them adequately and effectively.
• Plan for disaster recovery and create response and contingency plans in the event of security incidents.
• Test and evaluate security solutions and advise on how they can be leveraged to address security challenges.
• Coordinate penetration testing and ‘ethical hacking efforts for the OSB and ensure the delivery of actionable contextualised reports.
• Perform security assessments of applications, systems, and networks, to identify potential weaknesses and ensure adequate defence against exploits of applicable vulnerabilities.
• Monitor identity and access management, including monitoring for abuse of permissions by authorised system users.
• Generate customised reports for both technical and non-technical staff and stakeholders on new threats or vulnerabilities driven by analysis, incidents, and adversary engagement.
• Maintain an information security risk register and assist with internal and external audits relating to information security.

• Assist with the creation, maintenance and delivery of a cyber security awareness programme for colleagues and other stakeholders.

  Skills & Experience

• Minimum of 5 years’ experience in a cyber security position

• CRISC, CISM Qualifications or equivalent preferred
• Strong technical background in security controls / operations, system, network security and security frameworks such as SOC, NIST, ISO27002, CIS.
• Expert understanding of the elements of cyber malware-space. Specifically, key threat actors and their motivations, attack types, routes of attack, services, and tools.
• Extensive experience of Threat Intelligence, Anomaly Detection and Response, Data Leakage Prevention, Intrusion Analysis and SIEM solutions.
• Experienced working with, and enabling organisations heavily invested / investing in cloud-based technologies.
• Previous relevant experience of working within an international and complex professional services, start-up or highly regulated industry would be an advantage.
• Strong analytical and problem-solving skills with ability to balance multiple priorities and meet deadlines, adjust to changing priorities.
• Identify and drive opportunities to further enhance the security posture of the OSB.
• Experience of working in a Security Operations Centre or partnering with / working for a Managed Security Service Provider would be an advantage.
• A hands-on, forward thinker, with a flexible mindset and ability to work in a fast-moving environment that embraces autonomy and is accountable for results.