Cyber Security Analyst – Governance, Risk and Culture

Responsibilities

• Develop a complete understanding of Baringa’s technology and information systems.
• Lead in the response to RFPs/audits, including supplier security due diligence and third‑party audit and assurance activities.
• Identify and communicate current and emerging security threats and cyber risks.
• Support a program of awareness-raising and training to deliver compliance and foster a cyber‑conscious culture across the company.
• Assist with the definition, implementation and maintenance of corporate security policies, standards and procedures.
• Provide ‘hands on’ assistance, particularly in technical control implementation and incident response.
• Co‑ordinate the needs of in‑house IT experts and remote employees, vendors and contractors.
• Work as part of a team to communicate ideas, suggestions and solutions that achieve the firm’s long‑term objectives, especially the GRC Strategy.
• Align organisational security strategy and infrastructure with overall business and information technology strategy.
• Manage company compliance with information security, policies, standards, contractual obligations and guidance through business managers and champions providing advice, support and guidance on risk‑based good practice.
• Lead on and produce technical security MI in support of governance and vulnerability management engagements.
• Support client engagement leads on client queries and requests – during the business development process and during ongoing client engagement – regarding Baringa’s information technology security policies and processes.

Requirements

• Experience in full‑time operational Cyber Security GRC, or Cyber Security role.
• Experience of compliance requirements for cloud technologies stacks such as Microsoft and AWS.
• Experience utilising emerging technologies, such as AI, to design and implement security solutions, monitoring and improving those solutions while working with a Cyber Security team.
• Thorough understanding of relevant industry security standards and protocols including ISO27001, National Institute of Standards and Technology (NIST), NSCS CAF, SOC, NIS 2 Directive and NCSC Cloud Security Principles.
• Background of consulting and engineering the design and development of security best practices, implementation of security measures, policies and processes to meet business goals, customer needs and regulatory requirements.
• Ability to use logic and reasoning to identify the strengths and weaknesses of IT systems, while seeking out vulnerabilities in IT infrastructures.
• Assist in risk assessment procedures, policy formation, role‑based authorisation methodologies, authentication technologies and security attack pathologies.
• Growth mentality with excellent problem‑solving skills, willing to assist in all areas of Cyber and to learn new technologies & processes.
• A self‑motivated individual with a “can do” attitude, who can work on their own initiative as well as part of a team.
• An excellent communicator who can help develop good Cyber practices with an ability to interact with all levels within the company.
• Strong leadership, stakeholder management, and project/team‑building skills, including the ability to lead teams and drive initiatives in multiple departments.
• #J-18808-Ljbffr