Cyber Security Analyst — Risk & Compliance

Sword Group; Aberdeen City; On-site; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Competitive salary

Career development

Flexible working

Pension scheme

Private health

Well-being

Insurance

Job summary

Sword Group is seeking a Cyber Security Analyst to oversee cyber assurance for the IS environment and protect information assets across platforms and processes. You will identify risk, report findings, and work with the Operational Security team to communicate threats to senior management.

In this role you will support second-line assurance, engage with vendors, and help develop secure IS operations while aligning with regulatory requirements.

Qualifications

• Strong cyber security experience with risk management knowledge.
• Experience with SIEM, EDR and NIDS technologies.
• Excellent verbal and written communication; able to explain complex concepts.
• Certifications such as CySA+, Security+ preferred.

Responsibilities

• Provide cyber assurance over the IS environment and protect assets.
• Identify, evaluate, and report cybersecurity risk to information assets.
• Support second-line assurance for confidentiality, integrity and availability.
• Collaborate with vendors and project teams to define security requirements.
• Conduct cyber risk assessments including third party suppliers.
• Apply threat modelling to complex designs and mitigations.
• Support incident management processes and improvements.

Skills

Cybersecurity experience

Analytical thinking

Problem solving

Communication skills

Threat modelling

Risk management

Self-motivated

Tools

SIEM

EDR

NIDS

Job description

Sword Group is seeking a Cyber Security Analyst to oversee cyber assurance for the IS environment and protect information assets across platforms and processes. You will identify risk, report findings, and work with the Operational Security team to communicate threats to senior management.

In this role you will support second-line assurance, engage with vendors, and help develop secure IS operations while aligning with regulatory requirements.