Cyber Security Analyst

Kier Group; Rushden; Hybrid; GBP 40,000 - 65,000; Full time

Job summary

Kier Group is seeking a Cyber Security Analyst to join our IT Security team. The role supports supplier and project security compliance across our supply chain, with hybrid working options and travel to sites as required.

The Analyst will assess and validate alignment with contractual, regulatory and organisational security requirements, producing dashboards and reports for governance forums. Applicants should have experience in security governance and supplier risk management, and be eligible

Qualifications

• Experience in security governance, risk and compliance.
• Proven supplier assurance or third-party risk management experience.
• Knowledge of ISO 27001, Cyber Essentials Plus, Defence Cyber Certification, Secure by Design and supply chain risk management.

Responsibilities

• Review supplier security submissions and evidence against contractual and regulatory requirements.
• Challenge inadequate responses and work with suppliers to achieve remediation and compliance.
• Conduct security audits and verification activities to ensure controls are operating effectively.
• Assess security risks and support risk management throughout supplier and project lifecycles.
• Produce assurance dashboards and reports for management and governance forums.

Skills

Security governance

Third-party risk management

ISO 27001 knowledge

Job description

We're looking for a Cyber Security Analyst to join our IT Security team.

Location

Flexible on Location - Hybrid working available with travel to offices and sites as required

Hours

37.5 per week - some flexibility on hours available if desired, just let us know when you speak to us.

We are unable to offer certificates of sponsorship to any candidates in this role.

As a Cyber Security Analyst, you'll play a vital role in ensuring that our suppliers, subcontractors, and projects meet the highest security standards. You'll independently assess and validate compliance with contractual, regulatory, and organisational security requirements, providing assurance that controls are effectively implemented and protecting our information and systems. This is an excellent opportunity to work across diverse projects, collaborating with teams to maintain robust security throughout our supply chain and project lifecycle.

What will you be responsible for?

As a Cyber Security Analyst, you'll be working within the Security Governance, Risk & Compliance team, supporting them in ensuring supplier and project compliance with security requirements. Your day to day will include:

• Reviewing and assessing supplier security submissions and evidence against contractual and regulatory requirements
• Challenging inadequate responses and working with suppliers to achieve remediation and compliance
• Conducting security audits and verification activities to ensure controls are operating effectively
• Assessing security risks and supporting risk management processes throughout supplier and project lifecycles
• Producing assurance dashboards and reports for management and governance forums

What are we looking for?

• You have demonstrable experience in security governance, risk and compliance
• You have proven experience in supplier assurance or third-party risk management
• You have working knowledge of ISO 27001, Cyber Essentials Plus, Defence Cyber Certification, Secure by Design, and supply chain risk management
• You possess strong communication and stakeholder management skills, with the ability to engage effectively at all levels
• You have the ability to obtain Security Check (SC) clearance

We're all about finding potential here at Kier, and transferrable skills are always welcome! So, even if you don't tick every box,

Rewards and benefits

We're proud to be able to offer our brilliant people a wide variety of benefits that you can tailor to your needs. You can see more information of benefits here.

Diversity and inclusion

Making Kier a diverse and inclusive place to work is a huge priority for us. We're proud of the steps we've taken so far, but we know we must always do more. Our employees are key in shaping Kier's diversity and inclusion initiatives and our people have made a huge impact on how we work, by using their experiences to shape our policies. You can see our D&I action plan here. As a Disability Confident employer, we will ensure that a fair and proportionate number of disabled applicants that meet the minimum criteria for this role will be offered an interview.

• Cyber Security Analyst.docx