Business Analyst - Cybersecurity

eTeam, Inc.; Sheffield; On-site; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Private healthcare (UK)

Contributory pension scheme

Support for professional development

Job summary

The Bank is seeking an experienced Cybersecurity Risk Analyst to join the Global TPSR Service team within Cyber Security. The role is part of the 1LOD and focuses on point-in-time third-party information security assessments to help businesses manage risk within their appetite.

Responsibilities include managing engagements, delivering TPSR reviews, reporting, and guidance to stakeholders; ensuring compliance with global standards; training new team members; and contributing to global meetings

Qualifications

• IT degree or relevant experience in third party information security reviews in financial services or global corporate service providers.
• ISO27001 and security certifications are desirable but not essential.
• Able to communicate technical subject matter to non-technical stakeholders.

Responsibilities

• Ensure adherence to global standard methodology, SLAs and tools.
• Manage engagements and assessments, QA and guidance requests.
• Articulate assessment results to business units and close identified deficiencies.
• Provide training and coaching to new team members and ensure regulatory compliance.

Skills

Information security

Risk assessment

Stakeholder communication

Customer service

Education

IT degree

ISO27001

CISA

CISM

CISSP

CRISC

Job description

Overview: Investigate and analyse incidents that are identified by CS Operations systems in order to determine whether incidents are a threat to the Bank and address those that are deemed a threat.

The Cybersecurity team at are engaged to transform the way Cybersecurity is accomplished at the bank and we are set to enable the business to do more, as securely as we want, or need to be. In short, in line with the Bank's strategy, we are to be Simpler, Better, Faster and of course - More Secure. To achieve this we have many exciting challenges ahead and are looking for people with a real passion for what they would like to do. Working with some of the best technology talent we are searching for technologists and enablers that will help support us on this journey. As an employee in the UK, you will have access to tailored professional development opportunities and a competitive pay and benefits package. This includes private healthcare for all UK-based employees, enhanced maternity and adoption pay and support when you return to work, and a contributory pension scheme with a generous employer contribution.

We are currently seeking an experienced individual to join this team in the role of Cybersecurity Risk Analyst. This role will be a member of the Global Third Party Security Review (TPSR) Service team within Cyber Security and forms part of the 1LOD (1st line of defence). TPSR is a regulated activity. The team is tasked with point in time third parties information security assessments to enable businesses departments to manage their relationship/service within their risk appetite and minimize the operational risk impacts to its shareholders, customers, employees, reputation and brand. The job holder is responsible to enable businesses and functions to manage their information security risks and to ensure risk and controls are assessed accurately, objectively and independently through professional and specialized subject matter experts.

Depending on the work assigned this may include:

• Managing Engagements, Business Impact Assessments, Guidance requests, Quality Assurance
• Conducting TPSRs (reviews, reports, identify deficiencies, quality assurance)
• Articulate and explain information security assessment results to business
• Closure of identified deficiencies (verifying evidence to confirm closure or clarifying what is needed to close them)

Your responsibilities will include:

• Ensuring adherence to global standard methodology, SLA's, quality, templates and tools
• Ensuring good stakeholder engagement
• Supporting overall activities of Global TPS, including admin and any special initiatives / projects
• Management Information (MI) / Reporting (actual generation of reports or contribution to appropriate reports)
• Delivery Service effectively and efficiently
• Propose process enhancements and tool improvements based on latest threats and changes in Group policy and standards
• Ensuring good stakeholder engagement
• Provide guidance and support to all customers/stakeholdersContributing to global meetings, driving actions and implementations at a global level
• Provides training and coaching to new team members
• Adhere strictly to compliance and operational risk controls in accordance with and regulatory standards, policies and practices
• Ensure all changes to Policies/ Functional Instruction Manual (FIM) are monitored and are reported to the relevant audience within the Services function

The ideal candidate for this role will have the below experience and qualifications:

• Relevant IT Degree and/or experience in operational processes or third party information security reviews in the Financial Services industry or global corporate service provider
• Background - desirable but not essential in one or more; risk management, Audit, IT Security
• Qualifications - desirable but not essential in one or more; ISO270001, CISA, CISM, CISSP, CRISC
• Positive and professional attitude, team player, flexible and adaptable, open to change(s)
• Confident and takes responsibility and ownership for work and personal development
• Ability to communicate technical subject matter to non-technical stakeholders
• Previous experience of delivering an excellent customer service
• Both spoken and written communication skills with experience of adapting your style and approach to the audience and message to be delivered

The base location of this role will be Sheffield

You’ll achieve more when you join . As a business operating in markets all around the world, we believe diversity brings benefits for our customers, our business and our people. This is why UK is committed to being an inclusive employer and encourages applications from all suitably qualified applicants irrespective of background, circumstances.