Cyber Security Analyst

Gateshead Council; Gateshead; Híbrido; GBP 35.000 - 45.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid working

Pension scheme

28–32 days annual leave

Training and development

Health & wellbeing resources

Descripción de la vacante

Gateshead Council is seeking a Cyber Security Analyst to protect council systems, networks and data. The role focuses on cyber security assurance and governance, risk and compliance, with a 40% on-site element at Gateshead Civic Centre and hybrid flexibility.

You will work across IT & Digital Services to provide security assurance, implement controls, and support risk-based decisions while promoting security awareness and best practices across the organisation.

Formación

• Knowledge of cyber security assurance principles and control frameworks.
• Understanding of threat and vulnerability management within a complex organisation.
• Experience producing and maintaining security policies, standards and risk assessments.
• Ability to apply cyber security standards, legislation and good practice.
• Ability to promote cyber security awareness and positive behaviours.
• Experience as a cyber security GRC and assurance point of reference.

Responsabilidades

• Provide assurance over cyber security solutions and controls across systems and data.
• Monitor cyber security posture and manage patch and vulnerability processes.
• Analyse vulnerabilities, risks and incidents and coordinate remediations.
• Produce and maintain cyber security documentation and risk assessments.
• Conduct threat research and advise on proportionate actions.
• Contribute to IT Security Policy Framework updates and standards.
• Promote security awareness across the Council and partners.
• Offer security guidance to IT & Digital Services and stakeholders.
• Support security in projects and service developments with risk assessments.

Conocimientos

Cyber security principles

Threat management

Policy documentation

Standards understanding

Security awareness

GRC reference

Stakeholder management

Analytical skills

Collaborative approach

Descripción del empleo

Cyber Security Analyst - Hybrid working 40% of your time in Gateshead Civic Centre

Protect. Defend. Strengthen. Help secure the digital services that support our communities.

Who We Are And What We Stand For

Do you want to help make Gateshead a place where everyone thrives? If that sounds like you, keep reading - we might just be the perfect match.

We’re delighted that you’re interested in working with us. You’d be joining us at a very exciting time.

We pride ourselves on our ambitious and forward-thinking approach to taking care of Gateshead and its people, and we passionately believe that our employees reflect that spirit in truly enabling Gateshead to thrive.

At Gateshead Council you’d be a highly valued member of a team that recognises and respects the skills that you bring to your role, encourages creativity and passionately advocates a great work / life balance. Our actions speak louder than words, and with flexi-time and hybrid working available across many of our roles, as well as a full suite of outstanding employee benefits, we’re confident that it isn’t just the salary that attracts our staff.

Your expertise can help protect the services that matter most to local people.

IT & Digital Services play a critical role in delivering the technology, infrastructure and digital capabilities that enable Gateshead Council, its schools and key partners to operate effectively and innovatively. The service provides strategic leadership, development, implementation and support of ICT solutions, ensuring employees are equipped with the tools and skills needed to work efficiently while safeguarding the council’s data through secure, resilient systems. Covering a broad portfolio, IT Services are at the heart of enabling modern, connected and data-driven services that improve outcomes for residents and communities.

Play a vital role in securing the systems that keep Gateshead Council running.

What You'll Get To Do

As a Cyber Security Analyst, you will play a key role in safeguarding the Council’s systems, networks and data from an ever‑evolving cyber threat landscape. The post will have a primary focus on Cyber Security Assurance and Governance, Risk and Compliance (GRC), working across IT & Digital Services and the wider Council to provide assurance that cyber risks are appropriately identified, managed and controlled. Responsibilities will include:

• Provide assurance over the implementation, configuration and effectiveness of cyber security solutions and controls, supporting the confidentiality, integrity and availability of the Council’s systems, services and data.
• Monitor and provide assurance over the Council’s cyber security posture, including oversight of patch and vulnerability management processes and the appropriate management of identified risks.
• Analyse security vulnerabilities, risks and incidents, supporting their investigation, recording and remediation and providing assurance that appropriate mitigating actions have been implemented.
• Produce, maintain and review cyber security documentation, including policies, standards, procedures, risk assessments, assurance records and supporting technical documentation.
• Undertake threat and vulnerability research to understand emerging cyber risks and assess their potential impact on the Council, recommending proportionate actions where appropriate.
• Keep abreast of developments in cyber security technologies, threats, methodologies, regulations and recognised good practice to support continuous improvement of the Council’s cyber security and assurance capabilities.
• Contribute to the development, review and maintenance of the Council’s IT Security Policy Framework, helping to ensure that policies and standards remain appropriate, effective and aligned with organisational requirements.
• Support and promote cyber security awareness and good security practice across the Council, using appropriate techniques to improve understanding amongst users of digital services.
• Act as a cyber security assurance and GRC point of reference, providing advice, guidance and constructive challenge to colleagues within IT & Digital Services and the wider Council.
• Participate in projects and service developments, providing security assurance, risk assessment and advice to help ensure systems and services are designed, implemented and maintained securely.
• Liaise with Council services, project teams, suppliers and external bodies to provide security, risk and compliance advice and assurance, supporting adherence to relevant legislation, regulatory requirements, Council policies and recognised cyber security standards.
• Prioritise and respond to support calls and requests for cyber security advice and assurance as appropriate, helping to maintain an effective and responsive service.

What You'll Bring (Essential Criteria)

• Knowledge of cyber security assurance principles and control frameworks, with the ability to assess whether security controls are appropriately designed, implemented and operating effectively.
• A good technical understanding of cyber security, vulnerabilities, patching and security controls, enabling you to provide informed assurance and constructively challenge technical teams and suppliers.
• Experience of producing and maintaining security policies, standards, risk assessments, assurance documentation and supporting procedures, translating technical and regulatory requirements into clear and practical guidance.
• An understanding of threat and vulnerability management, with the ability to consider emerging threats and vulnerabilities in the context of organisational risk.
• An understanding of relevant cyber security standards, frameworks, legislation and good practice, and the ability to apply these proportionately within a complex organisation.
• An ability to promote cyber security awareness and positive security behaviours, communicating security requirements clearly to both technical and non-technical audiences.
• The confidence to act as a cyber security GRC and assurance point of reference, providing advice, guidance and constructive challenge across IT & Digital Services and the wider Council.
• Strong communication and stakeholder management skills, with the ability to work effectively with Council services, technical teams, project teams, suppliers and external organisations on security, risk and compliance matters.
• Good analytical and organisational skills, with the ability to prioritise competing risks, assurance activities and requests and communicate findings clearly.
• A collaborative and pragmatic approach, with the ability to balance cyber security risk, compliance requirements and operational needs while supporting the Council to deliver secure and effective digital services.

What’s In It For You

• Competitive Salary: We offer fair and transparent pay that reflects your skills and experience.
• Outstanding Pension Scheme: We don’t just offer a great salary we invest in your future too. Find out what benefits a Local Government Pension provides: https://twpf.info
• Generous Annual Leave: Enjoy 28 days of annual leave, rising to 32 days after 5 years (2 of which can be fixed by the Council), plus the option to buy up to 10 extra days.
• Flexible Working Hours: Benefit from up to 26 flexi days per year (subject to business needs), giving you more control over your time.
• Hybrid & Flexible Working: We support a healthy work-life balance with flexible and hybrid working options.
• Learning & Development: Access a wide range of training, development, and progression opportunities to help you grow your career.
• Health & Wellbeing Support: From discounted gym memberships through our partner GLL to mental health resources, we care about your wellbeing.
• Cycle to Work Scheme: Save money and stay active with our tax-efficient cycle to work programme.
• Electric & Hybrid Car Scheme: Get behind the wheel of a brand-new electric or hybrid vehicle through our salary sacrifice car scheme in partnership with NHS Fleet Solutions a cost-effective, environmentally friendly way to drive (after 12 months service).
• Exclusive Discounts & Salary Sacrifice: Through our VIVUP employee benefits platform, enjoy discounts on shopping, travel, and services plus salary sacrifice options on white goods, electronics, and more, helping you spread the cost of essential purchases (after 6 months service).

Our commitment to you

We are an equal opportunities employer and aim to have a culture and a workplace where our people feel a sense of belonging, are respected and empowered to do their best work. We know that we deliver better services when our workforce reflects the full range of backgrounds and experiences in the society we serve. We welcome applications from suitably qualified people from all sections of the community, regardless of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex, and sexual orientation

Please note:

As a Disability Confident employer, we guarantee an interview to all disabled applicants who meet the essential criteria for the role. However, in high-volume recruitment situations, it may not always be practicable to interview every eligible candidate. In such cases, we may need to prioritise those who best meet the essential criteria, based on the information provided in the application. Additionally, the Council reserves the right to close this vacancy early or adjust the shortlisting criteria, including the pass mark for interview selection, to ensure a fair and manageable recruitment process. We encourage early applications.