Cyber Security Analyst

Job Description

Security Policy & Framework Implementation

• Support implementation of cybersecurity frameworks and procedures aligned to ISO 27001 and NCA Essential Cybersecurity Controls (ECC)

• Coordinate with IT and infrastructure teams to enforce security controls and configuration baselines; contribute to policy review cycles

Security Monitoring & Threat Detection

• Operate SIEM platforms to correlate events, investigate alerts, and escalate confirmed incidents; maintain continuous threat intelligence visibility

• Review firewall logs, IDS/IPS alerts, endpoint protection events, and DLP notifications

Vulnerability Management & Risk Assessment

• Assist in vulnerability assessments, risk assessments, and remediation tracking against agreed SLAs and risk acceptance criteria

• Support penetration testing exercises; contribute to risk register maintenance and risk treatment planning

Incident Response

• Participate in incident response: detection, investigation, containment, eradication, and reporting

• Maintain incident response playbooks; document timelines, root causes, and lessons learned; coordinate with IT teams to minimize impact GRC & Compliance

• Ensure compliance with internal policies and applicable regulatory requirements (GRC, NCA ECC, ISO 27001)

• Support internal and external audits by preparing evidence and control walkthroughs; track open findings and remediation progress

Security Awareness, Reporting & Documentation

• Assist with phishing simulations, end-user training, and security awareness campaigns to promote a security-conscious culture

• Prepare regular security reports, dashboards, and metrics for management; maintain accurate, up-to-date security documentation

Job Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field

• Minimum 2 years of experience in cybersecurity or information security roles

• Hands-on exposure to SIEM platforms and security monitoring tools