Senior Information Security Analyst, UK

Realty Income Corporation; London; Hybrid; GBP 50,000 - 90,000; Full time

Job summary

Join a leading Real Estate Investment Trust as a Senior Information Security Analyst and play a pivotal role in enhancing security measures across the organization. This exciting opportunity allows you to work collaboratively with various teams to monitor security alerts, respond to incidents, and implement best practices in security governance and compliance. You'll be part of a dynamic Info Sec team, contributing to the security posture of a company committed to innovation and growth. If you're passionate about information security and eager to take on new challenges, this role could be the perfect fit for you.

Benefits

Hybrid working arrangements

Diversity and inclusion initiatives

Professional development opportunities

Qualifications

• Experience in Information Security and technical IT roles is essential.
• Knowledge of security frameworks and compliance standards required.

Responsibilities

• Monitor security alerts and respond to threats promptly.
• Collaborate with teams to remediate vulnerabilities effectively.

Skills

Information Security

Incident Response

Analytical Skills

Communication Skills

Problem-Solving

Cloud Security

DevOps Practices

Data Loss Prevention

Education

Bachelor's degree in Information Security

Cybersecurity certifications (CISSP, Sec+, etc.)

Tools

Microsoft Defender

Zscaler

Okta

ServiceNow

SIEM platforms

Job description

About Realty Income

Realty Income (NYSE: O), an S&P 500 company, is a real estate partner to the world's leading companies. Founded in 1969, we invest in diversified commercial real estate and have a portfolio of over 15,450 properties in all 50 U.S. states and in seven countries in Europe.

The European portfolio including the UK has grown significantly since our first international acquisition, a £429m 12-property portfolio from Sainsbury’s in 2019. In just five years the portfolio now includes investments of over €11bn, and 483 distinct properties.

Be a part of this growth story for a world leading Real Estate Investment Trust! As a trailblazer for the Info Sec team in Europe, this opportunity will empower your career, allowing you to take on additional responsibility and challenges, whilst you broaden your experience and skillsets.

Position Overview:

The Senior Information Security Analyst is responsible for enhancing our security posture, developing security processes and procedures, and responding to security incidents. This role will work with other teams across the organization to ensure that vulnerabilities are discovered and remediated in a timely manner to ensure the security of IT and development systems.

Key Responsibilities:

Security Operations and Monitoring

1. Monitor security alerts, investigate incidents, and respond to threats in a timely manner.
2. Collaborate with the Security Operations Center to respond to critical incidents and enhance the tools for better detection and alerting.
3. Complete assigned ServiceNow incidents and tasks within the defined SLAs.
4. Implement, manage, and optimize new and existing security tools, including but not limited to Microsoft Defender, Zscaler, and Okta.
5. Work with IT and development team members to ensure essential security and operational logging is being collected and analyzed and relevant security alerts are being generated.
6. Automate processes to reduce manual task delivery and enhance process delivery.

Vulnerability Management

1. Collaborate with IT and development teams to detect and remediate vulnerabilities across the enterprise in alignment with defined SLAs.
2. Understand current and emerging security threats and assist in the design of security tools to mitigate threats across the enterprise.
3. Conduct regular threat hunt activities and report findings to leadership.

Security Governance and Compliance

1. Ensure all work follows relevant security standards and regulations, including SOX, NIST, GDPR, CPRA, and other industry-specific requirements.
2. Participate in annual security assessments and audit activities.
3. Develop and implement Standard Operating Procedures and other documentation as it relates to Information Security processes and best practices.
4. Participate in the Security Awareness program to promote a culture of security throughout the organization.

REQUIRED QUALIFICATIONS:

Knowledge, Skills, and Abilities:

1. Suitable experience in an Information Security role.
2. Some relevant experience in a technical IT role (System Administration/Network Administration/DevOps).
3. Knowledge of security frameworks and regulatory compliance standards (NIST CSF, SOX ITGC, GDPR, MITRE ATT&CK, etc.)
4. Experience with common industry SIEM and vulnerability management platforms.
5. Experience maintaining the Microsoft Defender platform and other Microsoft security products.
6. Ability to rank and prioritize vulnerabilities and security recommendations appropriately within the context of the infrastructure and business processes.
7. Experience maintaining identity and access management systems including PAM technology and other authentication and authorization control platforms.
8. Experience with Incident Response best practices.
9. Knowledge of cloud security best practices related to AWS and Azure cloud services.
10. Knowledge of DevOps practices and secure software deployment frameworks.
11. Knowledgeable of Data Loss Prevention (DLP) concepts and techniques as well as other data protection practices.
12. Working technical knowledge of IT systems, including Active Directory, Microsoft 365, and Windows OS.
13. Excellent written and verbal communication skills including the ability to present findings and risks to senior leadership.
14. Strong analytical and problem-solving skills.
15. Ability to work independently, take initiative, and manage workload with minimal supervision.
16. Hybrid working arrangements, in the office Tuesday / Wednesday / Thursday.
17. Make yourself available outside of normal working hours for security incidents.

Education:

1. Bachelor’s degree in information security or related field or equivalent; combination of education and experience.
2. Must have Cybersecurity certification(s) (CISSP, Sec+, CCSP, CEH) or equivalent.

Our Mission & Values

For more than 50 years, Realty Income has been guided by our mission to invest in people and places to deliver dependable monthly dividends that increase over time. We do this by nurturing long-term, meaningful relationships that enable people to achieve a better financial outlook. We understand that when individuals succeed financially, they are able to provide for their families, support local businesses and pursue their greatest ambitions—creating a lasting positive impact on communities.

Realty Income is committed to diversity and inclusion and welcomes all applicants regardless of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex, sexual orientation or educational background.