Senior Cyber Security Analyst

E.ON; Nottingham; On-site; GBP 60,000 - 90,000; Full time

Job summary

E.ON UK is seeking a Senior Cyber Security Analyst to independently manage operational cybersecurity activities across the organisation. You will own incident response, risk assessments, vulnerability management and the implementation of security controls to keep systems secure and compliant.

You will help maintain regulatory compliance and strengthen security governance, driving best practices and fostering a strong security culture across the business.

Qualifications

• Proven industry experience in cyber security, ideally 3–5 years, with a recognised professional qualification such as CISSP or working towards it, supported by ongoing CPD.
• Strong understanding of security operations, risk management and regulatory compliance.
• Experience using SIEM, endpoint protection and vulnerability management tools.
• Working knowledge of relevant regulatory requirements, industry standards and recognised security frameworks.
• Industry experience with SEC, REC, CAF and UKCSRB.
• Ability to investigate and respond effectively to security incidents, applying sound judgement and a structured approach to incident management.
• Strong risk assessment skills, with the ability to identify, evaluate and manage cybersecurity risks.
• Experience identifying, prioritising and supporting the remediation of security vulnerabilities.
• Ability to support regulatory compliance and ensure adherence to relevant requirements and security standards.
• Strong technical troubleshooting and problem-solving skills, with the ability to investigate and resolve security-related issues.
• Effective stakeholder engagement and communication skills, with the ability to build relationships and communicate security matters clearly.

Responsibilities

• Investigate and respond to security incidents.
• Conduct security risk and vulnerability assessments.
• Implement and maintain technical security controls.
• Support cloud, network, and endpoint security.
• Lead compliance activities and support internal and external audits.
• Develop and maintain security policies and procedures.
• Deliver security awareness guidance.
• Recommend and implement security improvements.

Skills

Cyber security

Incident response

Risk assessments

Vulnerability management

Regulatory compliance

Security controls

Cloud security

SIEM

Endpoint protection

Security frameworks

Education

CISSP (in progress)

Tools

SIEM tools

Endpoint protection tools

Vulnerability management tools

Job description

Independently manages operational cybersecurity activities, including incident response, risk assessments, vulnerability management, regulatory compliance, and implementation of security controls across the organisation.

Main Responsibilities

• Investigate and respond to security incidents.
• Conduct security risk and vulnerability assessments.
• Implement and maintain technical security controls.
• Support cloud, network, and endpoint security.
• Lead compliance activities and support internal and external audits.
• Develop and maintain security policies and procedures.
• Deliver security awareness guidance.
• Recommend and implement security improvements.

• Proven industry experience in cyber security, ideally 3–5 years, with a recognised professional qualification such as CISSP or working towards it, supported by ongoing CPD.

• Strong understanding of security operations, risk management and regulatory compliance.

• Experience using SIEM, endpoint protection and vulnerability management tools.

• Working knowledge of relevant regulatory requirements, industry standards and recognised security frameworks.

• Industry experience with SEC, REC, CAF and UKCSRB.

• Ability to investigate and respond effectively to security incidents, applying sound judgement and a structured approach to incident management.

• Strong risk assessment skills, with the ability to identify, evaluate and manage cybersecurity risks.

• Experience identifying, prioritising and supporting the remediation of security vulnerabilities.

• Ability to support regulatory compliance and ensure adherence to relevant requirements and security standards.

• Strong technical troubleshooting and problem-solving skills, with the ability to investigate and resolve security-related issues.

• Effective stakeholder engagement and communication skills, with the ability to build relationships and communicate security matters clearly.

• A collaborative approach to teamwork, working effectively with colleagues and stakeholders to achieve shared security objectives.

Please note the closing date may end early if we receive a high volume of applications,

As a Senior Cyber Security Analyst, you'll independently manage operational cybersecurity activities to help protect E.ON's technology, data and digital services. You'll take ownership of incident response, risk assessments, vulnerability management and the implementation of security controls, ensuring security risks are effectively managed and systems remain secure and resilient.

You’ll also play a key role in maintaining regulatory compliance and strengthening security governance across the organisation. This is an opportunity to apply your expertise, drive effective security practices and help safeguard critical services while fostering a strong security culture across the business.

The role holder will form part of our out of hours cyber security incident response.

• Investigate and respond to cybersecurity incidents, helping to minimise risks and protect the organisation’s systems and data.

• Conduct security risk assessments and vulnerability assessments, identifying potential threats and recommending appropriate mitigation measures.

• Implement, monitor and maintain technical security controls to strengthen the organisation’s security posture.

• Support the security of cloud environments, networks and endpoint devices, ensuring systems remain protected against emerging threats.

• Lead cybersecurity compliance activities and support internal and external audits, ensuring adherence to relevant regulatory and security requirements.

• Develop, maintain and improve security policies, standards and procedures to support effective security governance.

• Provide security awareness guidance to colleagues, promoting best practices and fostering a strong security culture across the organisation.

• Identify opportunities to enhance security capabilities, recommending and implementing improvements to strengthen resilience and reduce risk.