Cyber Security Operations Analyst

University of Bath; Bath; On-site; GBP 40,000 - 60,000; Full time

Benefits offered by this job

Annual leave

Pension

Cycle to work

EV salary sacrifice

Staff gym discount

Staff benefits include discounted PGTu

Relocation allowance

Visa reimbursement

Employee assistance

Job summary

The University of Bath is seeking a Cyber Security Operations Analyst to join the Security Operations Centre. You will respond to security events, deploy mitigations, review controls and support risk-based decision-making to protect university data and services.

This full-time role (36.5 hours per week) includes a market supplement of £3,500 and requires collaboration with vendors and colleagues across the university to maintain resilience.

Qualifications

• Broad knowledge of security risk & assurance practices, including security control frameworks.
• Experience with regulatory/compliance responsibilities for universities (GDPR, DPA, PCI DSS, Ofsted).
• Broad technical knowledge of various tools, how to operate them, interpret outputs and apply recommendations.
• Experience measuring performance/effectiveness of security controls to reduce incidents and protect data.
• Understanding reducing risk across third parties and the supply chain.

Responsibilities

• Respond to and resolve security events and incidents; identify vulnerabilities and deploy mitigations.
• Manage and operate the University’s Security Operations Centre (SOC).
• Undertake risk assessments, horizon scanning and ensure the control environment remains resilient.
• Review security processes and systems; propose improvements and work with vendors.
• Participate in change approval boards and oversee security elements of new products and services.

Skills

Security risk

ISO 27001

Cyber Essentials

NIST CSF

OWASP

GDPR

PCI DSS

Third-party risk

Tools

Security tools

Job description

About The Role

Cyber Security is at the heart of University strategic decision-making. We attract students not only by providing them with world-class learning opportunities, but also by providing assurances about the protection of their sensitive data, creating a secure learning environment, and keeping them safe online.

Cyber Security Operations Analyst

Our ability to generate competitive advantage in the award of research grants and sponsorships is tied closely to our cyber security values and behaviours. Ensuring we’re a safe and secure organisation to do business with, protecting corporate interests and data throughout the supply chain. The Security Operations Analyst is part of a team responsible for a broad range of cyber security tasks and activities, including management and operation of the University’s Security Operations Centre (SOC), operating and applying security controls in line with standard frameworks – ISO 27001, NIST CSF, Cyber Essentials – and facilitating risk-based decision‑making to ensure maintenance of security posture. You will be responsible for undertaking all aspects of security operations, including responding to and resolving security events and incidents, identifying vulnerabilities, deploying mitigation tactics and escalating where appropriate, safeguarding sensitive information from unauthorised access, and generally maintaining security posture in line with the University’s risk appetite. Additionally, you will undertake risk assessments and perform horizon scanning, ensuring that the University control environment is optimally configured to respond to the latest threats to maintain resilience and continuity of service across key systems, services and infrastructure. You will be expected to review security processes, systems and capabilities that affect the security of our most critical assets. You will proactively work with colleagues to identify areas of weakness and exposures and create recommendations for continual improvement. As appropriate, you will take part in change approval boards, oversee the security elements of delivering new products and services into live University environments, and work closely with vendors. This role is offered on a full‑time (36.5 hours per week) permanent basis. This role includes a market supplement of £3,500 in addition to the base salary scale.

About You

• A broad knowledge of security risk and assurance practices, including detailed knowledge of security control frameworks: ISO 27001/Cyber Essentials/NIST CSF/NIS/CIS Top 20/OWASP.
• Experience of regulatory and compliance responsibilities for universities, including GDPR, DPA, PCI DSS, and Ofsted.
• A broad technical knowledge of various tools, how to operate and maintain them, interpret the output, and apply the recommendations.
• Excellent practical experience and knowledge of measuring the performance and effectiveness of security controls to reduce incidents, safeguard sensitive data, and improve overall security posture.
• Knowledge and understanding of reducing risk and exposure across third parties and throughout the supply chain.

What we can offer you

We consider ourselves to be a university where difference is celebrated, respected and encouraged. We have an excellent international reputation with staff from over 60 different nations and have made a positive commitment towards gender equity and intersectionality receiving a Silver Athena SWAN award. We truly believe that diversity of experience, perspectives, and backgrounds will lead to a better environment for our employees and students and encourage applications from all genders, backgrounds, and communities, particularly from under-represented groups, and value the positive impact that will have on the university. We are committed to maintaining a safe and secure environment for our students, staff, and community by reinforcing our Safer Recruitment commitment.

We’re very proud to be a signatory of the Armed Forces Covenant. an accredited Disability Confident Leader; autism friendly university, committed to building disability confidence and supporting disabled staff.

Benefits

• Generous annual leave allowance with an additional 5 discretionary days so that you can enjoy a positive work life balance
• Generous employer contributory pension schemes
• Cycle to work scheme
• Electric vehicle salary sacrifice scheme
• Staff discount at Team Bath gym
• Staff benefits include discounted postgraduate tuition and language courses, alongside a wide range of personal and professional development opportunities such as apprenticeships, LinkedIn Learning, and more
• Local discounts, including free entry to the Holburne Museum in Bath
• A family-friendly workplace
• An excellent reward package that recognises the talents of our diverse workforce
• Relocation allowance
• Visa reimbursement and Interest-Free Loan to help with the cost of some immigration expenses
• Employee assistance services through Health Assured, including access to the Wisdom app

Find out more about our benefits and watch the video to hear from our staff about what makes the University of Bath a great place to work as well as following us X and LinkedIn.

Be Well at Bath

We’re Committed To Creating a Health-supporting Working Environment Where Everyone Can Thrive And Be At Their Best. We Offer a Range Of Resources To Enable You To Do That From Your First Day Here, Including

• Staff support groups and networks
• A network of Staff Wellbeing Champions
• A suite of tools, resources and frameworks that enable you to be at your best and thrive

Find out more about being at your best at Bath.

Further Details

• Job Description & Person Specification

Terms and Conditions of Employment

Right to Work in the UK: We do not assess immigration or right to work status until offer stage. Being invited to interview does not guarantee you are eligible for visa sponsorship and all offers are conditional on meeting right to work requirements. Further information is available on our application support webpage.

Anonymous shortlisting: We are constantly seeking to reduce the unconscious bias that enters any assessment process, with the goal of creating an inclusive and equal assessment process. To support this, personal details such as your name, may be removed from application forms at the initial shortlisting stage.