Security Analyst

• Security Operations: Reviewing inbound requests from the Secure Operations Centre and helping to prioritise and raise awareness of security events.
• Vendor Security Reviews: Execute vendor security assessments and due diligence reviews for new and existing third-party suppliers, maintaining required documentation for the Vendor Governance Forum.
• Audit Support: Assist the team in achieving and maintaining compliance with key regulatory and industry frameworks, including GDPR, ISO 27001, SOC 2, and PCI DSS, by working with stakeholders to gather evidence and documenting controls.
• Policy & Standards: Help translate high-level security policies into practical, actionable security standards and control requirements for engineering teams.
• Risk Reporting: Document and track identified risks from AppSec, vendor reviews, and operations, ensuring they are accurately captured and reported.
• Security Training: Support the delivery of security awareness and training programs tailored for technical and non-technical staff.
• Security Programmes: Working with Product teams to execute and improve security programmes such as Disaster Recovery.

Cyber Security Analyst

Lead Data and Intelligence Analyst