Senior Cyber Security Analyst

E.ON UK Ltd; Nottingham; Hybrid; GBP 61,000 - 82,000; Full time

Job summary

E.ON UK Ltd is seeking a Senior Cyber Security Analyst to independently manage operational cybersecurity activities, incidents, risk assessments and vulnerability management. You will implement security controls and help ensure regulatory compliance, while strengthening governance and security culture across the organisation.

The role involves out-of-hours cyber security incident response and close collaboration with stakeholders to safeguard critical services and maintain a strong security

Qualifications

• Must have proven experience in cyber security and incident response.
• Experience with risk assessments, vulnerability management and regulatory compliance.
• Familiarity with security operations and governance frameworks.
• Working knowledge of cloud security, networks and endpoint security.
• Professional qualification such as CISSP or working towards it; CPD ongoing.

Responsibilities

• Investigate and respond to cybersecurity incidents to minimise risk.
• Conduct security risk assessments and vulnerability assessments with recommended mitigations.
• Implement and monitor security controls to strengthen security posture.
• Support cloud, network and endpoint security across the organisation.
• Lead cybersecurity compliance activities and assist audits.
• Develop and maintain security policies, standards and procedures.
• Provide security awareness guidance to colleagues and foster a security culture.
• Identify opportunities to enhance security capabilities and resilience.

Skills

Cyber security

Incident response

Risk assessment

Vulnerability management

Regulatory compliance

Security governance

Cloud security

Security awareness

Stakeholder engagement

Education

CISSP or working towards

Tools

SIEM

Endpoint protection

Vulnerability management tools

Job description

Here's what you'll be doing

Salary- £60,875 - £81,543

Location- Nottingham, Solihull or Kingswinford with hybrid working

As a Senior Cyber Security Analyst, you'll independently manage operational cybersecurity activities to help protect E.ON's technology, data and digital services. You'll take ownership of incident response, risk assessments, vulnerability management and the implementation of security controls, ensuring security risks are effectively managed and systems remain secure and resilient.

You'll also play a key role in maintaining regulatory compliance and strengthening security governance across the organisation. This is an opportunity to apply your expertise, drive effective security practices and help safeguard critical services while fostering a strong security culture across the business.

The role holder will form part of our out of hours cyber security incident response.

• Investigate and respond to cybersecurity incidents, helping to minimise risks and protect the organisation's systems and data.

• Conduct security risk assessments and vulnerability assessments, identifying potential threats and recommending appropriate mitigation measures.

• Implement, monitor and maintain technical security controls to strengthen the organisation's security posture.

• Support the security of cloud environments, networks and endpoint devices, ensuring systems remain protected against emerging threats.

• Lead cybersecurity compliance activities and support internal and external audits, ensuring adherence to relevant regulatory and security requirements.

• Develop, maintain and improve security policies, standards and procedures to support effective security governance.

• Provide security awareness guidance to colleagues, promoting best practices and fostering a strong security culture across the organisation.

• Identify opportunities to enhance security capabilities, recommending and implementing improvements to strengthen resilience and reduce risk.

• Proven industry experience in cyber security, ideally 3-5 years, with a recognised professional qualification such as CISSP or working towards it, supported by ongoing CPD.
• Strong understanding of security operations, risk management and regulatory compliance.
• Experience using SIEM, endpoint protection and vulnerability management tools.
• Working knowledge of relevant regulatory requirements, industry standards and recognised security frameworks.
• Industry experience with SEC, REC, CAF and UKCSRB.
• Ability to investigate and respond effectively to security incidents, applying sound judgement and a structured approach to incident management.
• Strong risk assessment skills, with the ability to identify, evaluate and manage cybersecurity risks.
• Experience identifying, prioritising and supporting the remediation of security vulnerabilities.
• Ability to support regulatory compliance and ensure adherence to relevant requirements and security standards.
• Strong technical troubleshooting and problem-solving skills, with the ability to investigate and resolve security-related issues.
• Effective stakeholder engagement and communication skills, with the ability to build relationships and communicate security matters clearly.
• A collaborative approach to teamwork, working effectively with colleagues and stakeholders to achieve shared security objectives.

Please notethe closing date may end early if we recieve a high volume of applications.