Find your next tech and IT Job or contract role.

Job Description Security Analyst Our Client is recognised brand in London. They are looking to recruit a Security Analyst with at least 5 to 7 years proven track record as a Security Analyst. Main Accountabilities • Technical leadership for all the Clients security solutions, including all the 3rd party managed services • Maintain the overall security of Company network, systems, and data • Monitor security access and manage IDS/IPS configurations • Establishing and implementing security 'best-practice' standards as well as departmental policies and procedures • Responsible for Security scanning and the efficient remediation of vulnerabilities • Responsible for analysing all security incidents to determine root cause • Determine, recommend, and implement upgrade security measures and controls • Delivery security responses for customer and client compliance requirements • Developing and managing security plans with vendors • Audit activities of administrators and conduct Security awareness training Must have: • Bachelor's Degree in Computer Science/Information Technology or equivalent experience • Demonstrable skills and capability in Security leadership and 3rd party management experience • CISSP certification preferred. Compliance knowledge required in ISO27001, PCI and GDPR. Possibly a certified ethical hacker • Knowledge of Security technologies is essential, such as network appliances, firewall administration, AD, IAM, PAM, SIEM, UEBA, AV, IDS/IPS and MDM solutions • Understanding of common frameworks, such as ITIL or LEAN is preferred • Good exposure of user environment management, including desktops/laptops, profile management, access control methodologies • Must be very proactive in understanding and staying up to date with current security technologies and industry technology trends The Client is based in Paddington London. The salary for this role is in the range £65K - £75K plus benefits. Do send your CV to us in Word format along with your salary and availability.

Job Description Senior Information Security Analyst Our Client is a leading global company specialising in pharma products. They are looking to recruit a Senior Information Security Analyst with at least 5 to 7 years expertise in Technology Security. The Senior Information Security Analyst is responsible for maintaining information security policies, architecture, technical standards, technical controls, security solutions, guidelines, procedures, and other elements necessary to maintain security posture. Responsible for assessing information risk and facilitating remediation of identified vulnerabilities & risks across the organization. Accountable for coordinating the execution of security measures to protect our computer infrastructure, information systems and to ensure the organization maintains an acceptable risk posture. The Senior Information Security Analyst is highly engaged in risk management and mitigation, including evaluating vendor risk, examining vendor contracts for terms of service, understanding third-party risk, and data privacy issues. The analyst serves as an expert on cybersecurity protection, detection, response, and recovery. This individual is responsible for coordinating penetration testing and managing internal and external cybersecurity analysts to detect, mitigate, and analyze threats. Works closely with other teams to develop controls such as firewalls, business systems, data leakage protection systems, patching, encryption, vulnerability scanning, application code scanning, remediation as well as defining configuration for a variety of security tools. Prior experience in an international enterprise environment is essential. Responsibilities: • Collaborate with IT teams for input and operational requirements to design and implement the company's overall cybersecurity strategy. • Identify and address security gaps discovered through ongoing monitoring of all information security controls and implement enhancements to security controls. • Manage access to elevated privileges accounts and audit activities to meet business and regulatory requirements. • Evaluate and/or implement cybersecurity solutions and controls to maintain confidentiality, integrity, and availability. • Actively participate in proofs-of-concept for new security technologies by developing selection criteria to identify appropriate security solutions to support strategic, operational needs, and security requirements. • Participate in the development and testing of the security incident response plan, act as the incident response leader. • Develop security, risk, and compliance reports and alerts. • Participate in the yearly review of policies and procedures to support information security, risk, and security compliance activities. • Participates in developing, testing, and implementation of disaster recovery procedures for the cybersecurity technology in place. • Manages cybersecurity projects to ensure that the delivery is on-time, within budget, and adopted to meet the company's information protection requirements. • Performs or coordinates internal security assessments, penetration tests, vulnerability scans, and assess organization cybersecurity maturity Complying with frameworks and regulations such as COBIT, NIST (800-53, cybersecurity), ISO, ITIL, PCI, GLBA, GDPR, HIPAA, and other data privacy and security standards and regulations. • Provides internal customer support via assigned tickets for security-related issues, while ensuring assignments are resolved within assigned SLA's. • Evaluate and implement CIS critical security controls where necessary. • Will provide input into cybersecurity strategic roadmap and annual budget. • Adhere to applicable change management policy and procedure. Qualifications: • Bachelor's degree required; advanced degree highly desirable. Candidates must possess significant analytical skills, which evolved from early academic training in Cybersecurity, Information Systems, Computer Science, or similar discipline. • Provides a documented work history that includes a minimum of 5-years experience in Information Security. • Proficiency in security framework models such as NIST, etc., implementing and auditing security measures, security response, and incident management. • Possess a working knowledge of Cisco network switches, routers, firewalls and VPN, network security, administration of DLP, antivirus\antimalware, IDS/IPS, SIEM, SMTP, Email security, AD, Group Policy, DNS, DHCP, and VLANs. • Experience with identity access management solutions, such as SAML\OATH • Experience with HIDS and NIDS • The ideal candidate possesses relevant information security or cybersecurity certifications. • Requires the ability to analyze and recommend changes to the security landscape where necessary to meet the information security objectives of the organization. • Participates in change management meetings and provides expert input to ensure security is maintained. • Knowledgeable in security best practices such as encryption, hashing, vulnerability scans, event log monitoring, intrusion detection and prevention, eDiscovery, and content filtering. • Ability to manage and continuously improve upon vulnerability management program. • Ability to propose solutions for closing identified vulnerabilities in the infrastructure. Desired Qualifications: • Certified Information System Security Professional (CISSP), NIST Cybersecurity Framework (NCSF), Certified Cloud Security Professional (CCSP) and\or Certified Ethical Hacker (CEH) • Knowledge and experience with Microsoft Office and Visio. • Knowledge of WAN technologies including MPLS, SD WAN. • Knowledge of cloud providers security (AWS, GCP or Azure). • Prior experience managing Cisco ELA products including DNA, Firepower, ISE Management console, Umbrella, Cisco AMP for endpoints, Stealth watch, as well as Splunk, SolarWinds, Varonis and Darktrace. • Prior experience with Azure Rights management and Information protection highly desirable. • Project management skills are highly desirable. • Previous experience in a HIPAA/FDA regulated environment. Competencies: To perform the job successfully, an individual should demonstrate the following behaviors: • Motivation/Initiative: Motivated and curious, willing to ask questions, research issues, and take on challenging projects/assignments; creative, brings new ideas to the table, exhibits self-confidence. Position requires a strong achievement motivation and tenacity. • Administrative Skills: Possesses the ability to organize and follow-through on multiple tasks recognizes and attends to important details with accuracy and efficiency. Works to complete goals, tasks, and plans, anticipate potential problems and analyze alternative solutions. • Interpersonal Style: (Interpersonal Skills, Communication, Teamwork); develops/ maintains effective working relationships; listens attentively to others; communicates ideas clearly (written & verbal); relates to people in an open/ sincere manner; participates effectively in meetings; assists in finding solutions as well as identifying problems; communicates appropriately with supervisor, and co-workers. Able to influence other individuals and maintain calm and reliable demeanor in the face of challenges. • Self-Management: (Adaptability/Flexibility, Stress Tolerance, Autonomy); adapts readily to changes in routine; works effectively in stressful situations; needs limited guidance and direction; is comfortable working in a fast-paced environment; is reliable and dependable; is results-oriented; maintains productivity and composure under pressure; views problems as opportunities to create solutions. • Thinking Skills: Diagnoses problems efficiently; gathers sufficient input before making decisions or plans; makes timely decisions, quickly determines sources of the problem, identifies information needed to solve a problem and analyzes alternative solutions, communicates issues and decisions effectively to the team. • Customer Orientation: Sensitive & responsive to internal customer needs; demonstrates skills in customer services and satisfaction; maintains a positive attitude, willing to listen to customer problems and seeks solutions; stays in tune with changing needs of customers. • The analyst will adapt readily to change, work effectively in stressful situations, need limited guidance and direction, and is comfortable working in a fast-paced environment. • Diagnoses problems efficiently gather sufficient input before making changes, quickly determines sources of issues, identifies information needed to solve the problems, and analyzes and communicates issues with effective alternative solutions to the team. This a UK based role at the Central London offices of the Client, although for the foreseeable future you will be based at home and work remotely. The salary for this role will be in the range £70K - £85K. Please do send your CV to us in Word format along with your salary and availability.

Job Description Senior Information Security Analyst Our Client is a leading global company specialising in pharma products. They are looking to recruit a Senior Information Security Analyst with at least 5 to 7 years expertise in Technology Security. The Senior Information Security Analyst is responsible for maintaining information security policies, architecture, technical standards, technical controls, security solutions, guidelines, procedures, and other elements necessary to maintain security posture. Responsible for assessing information risk and facilitating remediation of identified vulnerabilities & risks across the organization. Accountable for coordinating the execution of security measures to protect our computer infrastructure, information systems and to ensure the organization maintains an acceptable risk posture. The Senior Information Security Analyst is highly engaged in risk management and mitigation, including evaluating vendor risk, examining vendor contracts for terms of service, understanding third-party risk, and data privacy issues. The analyst serves as an expert on cybersecurity protection, detection, response, and recovery. This individual is responsible for coordinating penetration testing and managing internal and external cybersecurity analysts to detect, mitigate, and analyze threats. Works closely with other teams to develop controls such as firewalls, business systems, data leakage protection systems, patching, encryption, vulnerability scanning, application code scanning, remediation as well as defining configuration for a variety of security tools. Prior experience in an international enterprise environment is essential. Responsibilities: • Collaborate with IT teams for input and operational requirements to design and implement the company's overall cybersecurity strategy. • Identify and address security gaps discovered through ongoing monitoring of all information security controls and implement enhancements to security controls. • Manage access to elevated privileges accounts and audit activities to meet business and regulatory requirements. • Evaluate and/or implement cybersecurity solutions and controls to maintain confidentiality, integrity, and availability. • Actively participate in proofs-of-concept for new security technologies by developing selection criteria to identify appropriate security solutions to support strategic, operational needs, and security requirements. • Participate in the development and testing of the security incident response plan, act as the incident response leader. • Develop security, risk, and compliance reports and alerts. • Participate in the yearly review of policies and procedures to support information security, risk, and security compliance activities. • Participates in developing, testing, and implementation of disaster recovery procedures for the cybersecurity technology in place. • Manages cybersecurity projects to ensure that the delivery is on-time, within budget, and adopted to meet the company's information protection requirements. • Performs or coordinates internal security assessments, penetration tests, vulnerability scans, and assess organization cybersecurity maturity Complying with frameworks and regulations such as COBIT, NIST (800-53, cybersecurity), ISO, ITIL, PCI, GLBA, GDPR, HIPAA, and other data privacy and security standards and regulations. • Provides internal customer support via assigned tickets for security-related issues, while ensuring assignments are resolved within assigned SLA's. • Evaluate and implement CIS critical security controls where necessary. • Will provide input into cybersecurity strategic roadmap and annual budget. • Adhere to applicable change management policy and procedure. Qualifications: • Bachelor's degree required; advanced degree highly desirable. Candidates must possess significant analytical skills, which evolved from early academic training in Cybersecurity, Information Systems, Computer Science, or similar discipline. • Provides a documented work history that includes a minimum of 5-years experience in Information Security. • Proficiency in security framework models such as NIST, etc., implementing and auditing security measures, security response, and incident management. • Possess a working knowledge of Cisco network switches, routers, firewalls and VPN, network security, administration of DLP, antivirusantimalware, IDS/IPS, SIEM, SMTP, Email security, AD, Group Policy, DNS, DHCP, and VLANs. • Experience with identity access management solutions, such as SAMLOATH • Experience with HIDS and NIDS • The ideal candidate possesses relevant information security or cybersecurity certifications. • Requires the ability to analyze and recommend changes to the security landscape where necessary to meet the information security objectives of the organization. • Participates in change management meetings and provides expert input to ensure security is maintained. • Knowledgeable in security best practices such as encryption, hashing, vulnerability scans, event log monitoring, intrusion detection and prevention, eDiscovery, and content filtering. • Ability to manage and continuously improve upon vulnerability management program. • Ability to propose solutions for closing identified vulnerabilities in the infrastructure. Desired Qualifications: • Certified Information System Security Professional (CISSP), NIST Cybersecurity Framework (NCSF), Certified Cloud Security Professional (CCSP) andor Certified Ethical Hacker (CEH) • Knowledge and experience with Microsoft Office and Visio. • Knowledge of WAN technologies including MPLS, SD WAN. • Knowledge of cloud providers security (AWS, GCP or Azure). • Prior experience managing Cisco ELA products including DNA, Firepower, ISE Management console, Umbrella, Cisco AMP for endpoints, Stealth watch, as well as Splunk, SolarWinds, Varonis and Darktrace. • Prior experience with Azure Rights management and Information protection highly desirable. • Project management skills are highly desirable. • Previous experience in a HIPAA/FDA regulated environment. Competencies: To perform the job successfully, an individual should demonstrate the following behaviors: • Motivation/Initiative: Motivated and curious, willing to ask questions, research issues, and take on challenging projects/assignments; creative, brings new ideas to the table, exhibits self-confidence. Position requires a strong achievement motivation and tenacity. • Administrative Skills: Possesses the ability to organize and follow-through on multiple tasks recognizes and attends to important details with accuracy and efficiency. Works to complete goals, tasks, and plans, anticipate potential problems and analyze alternative solutions. • Interpersonal Style: (Interpersonal Skills, Communication, Teamwork); develops/ maintains effective working relationships; listens attentively to others; communicates ideas clearly (written & verbal); relates to people in an open/ sincere manner; participates effectively in meetings; assists in finding solutions as well as identifying problems; communicates appropriately with supervisor, and co-workers. Able to influence other individuals and maintain calm and reliable demeanor in the face of challenges. • Self-Management: (Adaptability/Flexibility, Stress Tolerance, Autonomy); adapts readily to changes in routine; works effectively in stressful situations; needs limited guidance and direction; is comfortable working in a fast-paced environment; is reliable and dependable; is results-oriented; maintains productivity and composure under pressure; views problems as opportunities to create solutions. • Thinking Skills: Diagnoses problems efficiently; gathers sufficient input before making decisions or plans; makes timely decisions, quickly determines sources of the problem, identifies information needed to solve a problem and analyzes alternative solutions, communicates issues and decisions effectively to the team. • Customer Orientation: Sensitive & responsive to internal customer needs; demonstrates skills in customer services and satisfaction; maintains a positive attitude, willing to listen to customer problems and seeks solutions; stays in tune with changing needs of customers. • The analyst will adapt readily to change, work effectively in stressful situations, need limited guidance and direction, and is comfortable working in a fast-paced environment. • Diagnoses problems efficiently gather sufficient input before making changes, quickly determines sources of issues, identifies information needed to solve the problems, and analyzes and communicates issues with effective alternative solutions to the team. This a UK based role at the Central London offices of the Client, although for the foreseeable future you will be based at home and work remotely. The salary for this role will be in the range £70K - £85K. Please do send your CV to us in Word format along with your salary and availability.

Job title: Cyber Security Assurance Analyst Location: Radway Green, Washington, Glascoed, Bishopton or Ridsdale. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role. Salary: £ 37, 236 What you'll be doing: Supporting the Cyber Lead with compliance assessments across the IT and Operational Technology (OT) estate to identify gaps and improvements needed to meet relevant Cyber Security Standards Assessing cyber risks to determine scale of impact and likelihood, and using the output to generate priorities remediation requirements Working with IT and OT suppliers and internal capability owners to identify remediation solutions and mitigate identified risk Support IM&T activities to ensure Land UK accreditation and contractual compliance, including ongoing compliance status and evidencing security control assurance Transferring knowledge of security standards and best practices to key stakeholders, raising awareness of security across Land UK Investigate impact of identified vulnerabilities provided by vendors, UK MoD and other sources, and recommending remediation actions Your skills and experiences: Essential: Good demonstrable understanding of cyber security fundamentals (CIA and IAAA) and methods of ensuring they are achieved Good understanding of cyber security disciplines (ICT/Computing, assurance, risk management, vulnerability/threat assessment) Experience of working in a project environment and awareness of system development lifecycle methodologies as well as security technologies Desirable: Prior exposure to cyber security audits, whether that being the auditor or auditee Knowledge of security policies, NIST, CE+, DEFSTAN 05-138 (or other similar standards), and good practices regarding their application ISC2 CC qualification or equivalent Benefits: You'll receive benefits including a competitive pension scheme, enhanced annual leave allowance and a Company contributed Share Incentive Plan. You'll also have access to additional benefits such as flexible working, an employee assistance programme, Cycle2work and employee discounts - you may also be eligible for an annual incentive. The IM&T Team: You will be joining a new exciting cyber team which is part of the IM&T (Information Management and Technology) team, interacting with various stakeholders and various team members based across the UK. You will report to the Senior Cyber Security Standards Specialist and be responsible for performing risk assessments, managing identified risks, and prioritising remediation activities to ensure compliance with Cyber Security Standards, in line with contract commitments. Why BAE Systems? This is a place where you'll be able to make a real difference. You'll be part of an inclusive culture that values diversity, rewards integrity, and merit, and where you'll be empowered to fulfil your potential. We welcome candidates from all backgrounds and particularly from sections of the community who are currently underrepresented within our industry, including women, ethnic minorities, people with disabilities and LGBTQ+ individuals. We also want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments. Please be aware that many roles working for BAE Systems will be subject to both security and export control restrictions. These restrictions mean that factors including your nationality, any previous nationalities you have held, and your place of birth may limit those roles you can perform for the organisation. Closing Date: 21st October 2024 We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible.

Security Risk Analyst DWP. Digital with Purpose. DWP have been undertaking an ambitious technology transition over the past few years, and there is still a long way to go. If you join us a Security Risk Analyst, you will develop your skills and understanding of the security tools and techniques used by DWP, while contributing to core security deliverables which keep millions of people protected. You'll get involved with change and governance, influencing security standards and governance boards, considering findings from across the wider cyber security teams and making recommendations that influence big decisions. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support some of the most vulnerable people in our society. You'll help change the face of public services used by nearly every person in the UK, at key moments in their lives. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. Delivery. Work. Projects. As a security Risk Analyst, you will focus on a mix of proactive risk assessments and day-to-day challenges, including: Assessing new engagements to ensure they are pitched at the right level for the team's involvement. Collaborating with delivery teams to understand existing security controls, identify gaps, and work with Cyber Security Risk Managers (CSRMs) to frame and mitigate risks. You help deliver 1st line risk identification, assessment, remediation and treatment of risks. You will identify controls and make recommendations to address security vulnerabilities and control weaknesses in project and ad hoc engagements. You will need the skills to: Undertake basic risk assessments with supervision and direction. Supports some complex risk analysis as part of a team. Understand the strategic drivers being delivered by Digital Security Risk Management (DSRM) ensuring new requests and asks are pitched at the appropriate level. Remain alert to emerging issues and trends which might impact your work area. Seek out and share experiences to develop knowledge of the team's business area. Work with others to identify areas for improvement and simplify processes to use fewer resources. Encourage ideas for change from a wide range of sources. Understand your own level of responsibility and empower others to make decisions where appropriate. Analyse and use a range of relevant, credible information from internal and external sources to support decisions. It would be useful to have, or be prepared to work towards: A BCS Certificate in Information Security Management Principles (CISMP), or equivalent qualification, knowledge, or experience of physical, technical and environmental security controls, information security management, information risk, people control, software development/ lifecycle, disaster recovery, investigation forensics and cryptography. Details. Wages. Perks. Location: You'll join us in one of our brilliant digital hubs in Blackpool and Newcastle-upon-Tyne. whichever is most convenient for you. Hybrid Work: We also have all the tools and tech we need to enable our people to work and collaborate flexibly. We work a hybrid model, with some time at home and some time in a hub with the team. Pay: We offer competitive pay of up to £36,545 Pension: You'll be eligible for a brilliant civil service pension with employer contributions of 28.97%, worth up to £10,587. Holidays: You'll get a generous leave package starting at 24 days rising to 26 after one year , plus all the usual bank holidays, and the option to take extra days off on flexi leave. Our broad benefits package is built around your work-life balance and includes: Flexible working, flexi hours and flexi days Hybrid working: some time in a hub with the team, some time at home Family-friendly policies Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Working in an award-winning environment and culture Professional development, coaching, mentoring and career progression opportunities. Process. Stage 1: Application Stage 2: Interview We know how valuable your time is. We have a clear and succinct hiring process with only TWO STAGES . Click apply now to see the full job description and get started with the next step in your career at DWP Digital .

Security Risk Analyst DWP. Digital with Purpose. DWP have been undertaking an ambitious technology transition over the past few years, and there is still a long way to go. If you join us a Security Risk Analyst, you will develop your skills and understanding of the security tools and techniques used by DWP, while contributing to core security deliverables which keep millions of people protected. You'll get involved with change and governance, influencing security standards and governance boards, considering findings from across the wider cyber security teams and making recommendations that influence big decisions. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support some of the most vulnerable people in our society. You'll help change the face of public services used by nearly every person in the UK, at key moments in their lives. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. Delivery. Work. Projects. As a security Risk Analyst, you will focus on a mix of proactive risk assessments and day-to-day challenges, including: Assessing new engagements to ensure they are pitched at the right level for the team's involvement. Collaborating with delivery teams to understand existing security controls, identify gaps, and work with Cyber Security Risk Managers (CSRMs) to frame and mitigate risks. You help deliver 1st line risk identification, assessment, remediation and treatment of risks. You will identify controls and make recommendations to address security vulnerabilities and control weaknesses in project and ad hoc engagements. You will need the skills to: Undertake basic risk assessments with supervision and direction. Supports some complex risk analysis as part of a team. Understand the strategic drivers being delivered by Digital Security Risk Management (DSRM) ensuring new requests and asks are pitched at the appropriate level. Remain alert to emerging issues and trends which might impact your work area. Seek out and share experiences to develop knowledge of the team's business area. Work with others to identify areas for improvement and simplify processes to use fewer resources. Encourage ideas for change from a wide range of sources. Understand your own level of responsibility and empower others to make decisions where appropriate. Analyse and use a range of relevant, credible information from internal and external sources to support decisions. It would be useful to have, or be prepared to work towards: A BCS Certificate in Information Security Management Principles (CISMP), or equivalent qualification, knowledge, or experience of physical, technical and environmental security controls, information security management, information risk, people control, software development/ lifecycle, disaster recovery, investigation forensics and cryptography. Details. Wages. Perks. Location: You'll join us in one of our brilliant digital hubs in Blackpool and Newcastle-upon-Tyne. whichever is most convenient for you. Hybrid Work: We also have all the tools and tech we need to enable our people to work and collaborate flexibly. We work a hybrid model, with some time at home and some time in a hub with the team. Pay: We offer competitive pay of up to £36,545 Pension: You'll be eligible for a brilliant civil service pension with employer contributions of 28.97%, worth up to £10,587. Holidays: You'll get a generous leave package starting at 24 days rising to 26 after one year , plus all the usual bank holidays, and the option to take extra days off on flexi leave. Our broad benefits package is built around your work-life balance and includes: Flexible working, flexi hours and flexi days Hybrid working: some time in a hub with the team, some time at home Family-friendly policies Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Working in an award-winning environment and culture Professional development, coaching, mentoring and career progression opportunities. Process. Stage 1: Application Stage 2: Interview We know how valuable your time is. We have a clear and succinct hiring process with only TWO STAGES . Click apply now to see the full job description and get started with the next step in your career at DWP Digital .

Security Risk Analyst DWP. Digital with Purpose. DWP have been undertaking an ambitious technology transition over the past few years, and there is still a long way to go. If you join us a Security Risk Analyst, you will develop your skills and understanding of the security tools and techniques used by DWP, while contributing to core security deliverables which keep millions of people protected. You'll get involved with change and governance, influencing security standards and governance boards, considering findings from across the wider cyber security teams and making recommendations that influence big decisions. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support some of the most vulnerable people in our society. You'll help change the face of public services used by nearly every person in the UK, at key moments in their lives. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. Delivery. Work. Projects. As a security Risk Analyst, you will focus on a mix of proactive risk assessments and day-to-day challenges, including: Assessing new engagements to ensure they are pitched at the right level for the team's involvement. Collaborating with delivery teams to understand existing security controls, identify gaps, and work with Cyber Security Risk Managers (CSRMs) to frame and mitigate risks. You help deliver 1st line risk identification, assessment, remediation and treatment of risks. You will identify controls and make recommendations to address security vulnerabilities and control weaknesses in project and ad hoc engagements. You will need the skills to: Undertake basic risk assessments with supervision and direction. Supports some complex risk analysis as part of a team. Understand the strategic drivers being delivered by Digital Security Risk Management (DSRM) ensuring new requests and asks are pitched at the appropriate level. Remain alert to emerging issues and trends which might impact your work area. Seek out and share experiences to develop knowledge of the team's business area. Work with others to identify areas for improvement and simplify processes to use fewer resources. Encourage ideas for change from a wide range of sources. Understand your own level of responsibility and empower others to make decisions where appropriate. Analyse and use a range of relevant, credible information from internal and external sources to support decisions. It would be useful to have, or be prepared to work towards: A BCS Certificate in Information Security Management Principles (CISMP), or equivalent qualification, knowledge, or experience of physical, technical and environmental security controls, information security management, information risk, people control, software development/ lifecycle, disaster recovery, investigation forensics and cryptography. Details. Wages. Perks. Location: You'll join us in one of our brilliant digital hubs in Blackpool and Newcastle-upon-Tyne. whichever is most convenient for you. Hybrid Work: We also have all the tools and tech we need to enable our people to work and collaborate flexibly. We work a hybrid model, with some time at home and some time in a hub with the team. Pay: We offer competitive pay of up to £36,545 Pension: You'll be eligible for a brilliant civil service pension with employer contributions of 28.97%, worth up to £10,587. Holidays: You'll get a generous leave package starting at 24 days rising to 26 after one year , plus all the usual bank holidays, and the option to take extra days off on flexi leave. Our broad benefits package is built around your work-life balance and includes: Flexible working, flexi hours and flexi days Hybrid working: some time in a hub with the team, some time at home Family-friendly policies Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Working in an award-winning environment and culture Professional development, coaching, mentoring and career progression opportunities. Process. Stage 1: Application Stage 2: Interview We know how valuable your time is. We have a clear and succinct hiring process with only TWO STAGES . Click apply now to see the full job description and get started with the next step in your career at DWP Digital .

Security Risk Analyst DWP. Digital with Purpose. DWP have been undertaking an ambitious technology transition over the past few years, and there is still a long way to go. If you join us a Security Risk Analyst, you will develop your skills and understanding of the security tools and techniques used by DWP, while contributing to core security deliverables which keep millions of people protected. You'll get involved with change and governance, influencing security standards and governance boards, considering findings from across the wider cyber security teams and making recommendations that influence big decisions. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support some of the most vulnerable people in our society. You'll help change the face of public services used by nearly every person in the UK, at key moments in their lives. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. Delivery. Work. Projects. As a security Risk Analyst, you will focus on a mix of proactive risk assessments and day-to-day challenges, including: Assessing new engagements to ensure they are pitched at the right level for the team's involvement. Collaborating with delivery teams to understand existing security controls, identify gaps, and work with Cyber Security Risk Managers (CSRMs) to frame and mitigate risks. You help deliver 1st line risk identification, assessment, remediation and treatment of risks. You will identify controls and make recommendations to address security vulnerabilities and control weaknesses in project and ad hoc engagements. You will need the skills to: Undertake basic risk assessments with supervision and direction. Supports some complex risk analysis as part of a team. Understand the strategic drivers being delivered by Digital Security Risk Management (DSRM) ensuring new requests and asks are pitched at the appropriate level. Remain alert to emerging issues and trends which might impact your work area. Seek out and share experiences to develop knowledge of the team's business area. Work with others to identify areas for improvement and simplify processes to use fewer resources. Encourage ideas for change from a wide range of sources. Understand your own level of responsibility and empower others to make decisions where appropriate. Analyse and use a range of relevant, credible information from internal and external sources to support decisions. It would be useful to have, or be prepared to work towards: A BCS Certificate in Information Security Management Principles (CISMP), or equivalent qualification, knowledge, or experience of physical, technical and environmental security controls, information security management, information risk, people control, software development/ lifecycle, disaster recovery, investigation forensics and cryptography. Details. Wages. Perks. Location: You'll join us in one of our brilliant digital hubs in Blackpool and Newcastle-upon-Tyne. whichever is most convenient for you. Hybrid Work: We also have all the tools and tech we need to enable our people to work and collaborate flexibly. We work a hybrid model, with some time at home and some time in a hub with the team. Pay: We offer competitive pay of up to £36,545 Pension: You'll be eligible for a brilliant civil service pension with employer contributions of 28.97%, worth up to £10,587. Holidays: You'll get a generous leave package starting at 24 days rising to 26 after one year , plus all the usual bank holidays, and the option to take extra days off on flexi leave. Our broad benefits package is built around your work-life balance and includes: Flexible working, flexi hours and flexi days Hybrid working: some time in a hub with the team, some time at home Family-friendly policies Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Working in an award-winning environment and culture Professional development, coaching, mentoring and career progression opportunities. Process. Stage 1: Application Stage 2: Interview We know how valuable your time is. We have a clear and succinct hiring process with only TWO STAGES . Click apply now to see the full job description and get started with the next step in your career at DWP Digital .

Security Risk Analyst DWP. Digital with Purpose. DWP have been undertaking an ambitious technology transition over the past few years, and there is still a long way to go. If you join us a Security Risk Analyst, you will develop your skills and understanding of the security tools and techniques used by DWP, while contributing to core security deliverables which keep millions of people protected. You'll get involved with change and governance, influencing security standards and governance boards, considering findings from across the wider cyber security teams and making recommendations that influence big decisions. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support some of the most vulnerable people in our society. You'll help change the face of public services used by nearly every person in the UK, at key moments in their lives. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. Delivery. Work. Projects. As a security Risk Analyst, you will focus on a mix of proactive risk assessments and day-to-day challenges, including: Assessing new engagements to ensure they are pitched at the right level for the team's involvement. Collaborating with delivery teams to understand existing security controls, identify gaps, and work with Cyber Security Risk Managers (CSRMs) to frame and mitigate risks. You help deliver 1st line risk identification, assessment, remediation and treatment of risks. You will identify controls and make recommendations to address security vulnerabilities and control weaknesses in project and ad hoc engagements. You will need the skills to: Undertake basic risk assessments with supervision and direction. Supports some complex risk analysis as part of a team. Understand the strategic drivers being delivered by Digital Security Risk Management (DSRM) ensuring new requests and asks are pitched at the appropriate level. Remain alert to emerging issues and trends which might impact your work area. Seek out and share experiences to develop knowledge of the team's business area. Work with others to identify areas for improvement and simplify processes to use fewer resources. Encourage ideas for change from a wide range of sources. Understand your own level of responsibility and empower others to make decisions where appropriate. Analyse and use a range of relevant, credible information from internal and external sources to support decisions. It would be useful to have, or be prepared to work towards: A BCS Certificate in Information Security Management Principles (CISMP), or equivalent qualification, knowledge, or experience of physical, technical and environmental security controls, information security management, information risk, people control, software development/ lifecycle, disaster recovery, investigation forensics and cryptography. Details. Wages. Perks. Location: You'll join us in one of our brilliant digital hubs in Blackpool and Newcastle-upon-Tyne. whichever is most convenient for you. Hybrid Work: We also have all the tools and tech we need to enable our people to work and collaborate flexibly. We work a hybrid model, with some time at home and some time in a hub with the team. Pay: We offer competitive pay of up to £36,545 Pension: You'll be eligible for a brilliant civil service pension with employer contributions of 28.97%, worth up to £10,587. Holidays: You'll get a generous leave package starting at 24 days rising to 26 after one year , plus all the usual bank holidays, and the option to take extra days off on flexi leave. Our broad benefits package is built around your work-life balance and includes: Flexible working, flexi hours and flexi days Hybrid working: some time in a hub with the team, some time at home Family-friendly policies Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Working in an award-winning environment and culture Professional development, coaching, mentoring and career progression opportunities. Process. Stage 1: Application Stage 2: Interview We know how valuable your time is. We have a clear and succinct hiring process with only TWO STAGES . Click apply now to see the full job description and get started with the next step in your career at DWP Digital .

Security Risk Analyst DWP. Digital with Purpose. DWP have been undertaking an ambitious technology transition over the past few years, and there is still a long way to go. If you join us a Security Risk Analyst, you will develop your skills and understanding of the security tools and techniques used by DWP, while contributing to core security deliverables which keep millions of people protected. You'll get involved with change and governance, influencing security standards and governance boards, considering findings from across the wider cyber security teams and making recommendations that influence big decisions. DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support some of the most vulnerable people in our society. You'll help change the face of public services used by nearly every person in the UK, at key moments in their lives. The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us. Delivery. Work. Projects. As a security Risk Analyst, you will focus on a mix of proactive risk assessments and day-to-day challenges, including: Assessing new engagements to ensure they are pitched at the right level for the team's involvement. Collaborating with delivery teams to understand existing security controls, identify gaps, and work with Cyber Security Risk Managers (CSRMs) to frame and mitigate risks. You help deliver 1st line risk identification, assessment, remediation and treatment of risks. You will identify controls and make recommendations to address security vulnerabilities and control weaknesses in project and ad hoc engagements. You will need the skills to: Undertake basic risk assessments with supervision and direction. Supports some complex risk analysis as part of a team. Understand the strategic drivers being delivered by Digital Security Risk Management (DSRM) ensuring new requests and asks are pitched at the appropriate level. Remain alert to emerging issues and trends which might impact your work area. Seek out and share experiences to develop knowledge of the team's business area. Work with others to identify areas for improvement and simplify processes to use fewer resources. Encourage ideas for change from a wide range of sources. Understand your own level of responsibility and empower others to make decisions where appropriate. Analyse and use a range of relevant, credible information from internal and external sources to support decisions. It would be useful to have, or be prepared to work towards: A BCS Certificate in Information Security Management Principles (CISMP), or equivalent qualification, knowledge, or experience of physical, technical and environmental security controls, information security management, information risk, people control, software development/ lifecycle, disaster recovery, investigation forensics and cryptography. Details. Wages. Perks. Location: You'll join us in one of our brilliant digital hubs in Blackpool and Newcastle-upon-Tyne. whichever is most convenient for you. Hybrid Work: We also have all the tools and tech we need to enable our people to work and collaborate flexibly. We work a hybrid model, with some time at home and some time in a hub with the team. Pay: We offer competitive pay of up to £36,545 Pension: You'll be eligible for a brilliant civil service pension with employer contributions of 28.97%, worth up to £10,587. Holidays: You'll get a generous leave package starting at 24 days rising to 26 after one year , plus all the usual bank holidays, and the option to take extra days off on flexi leave. Our broad benefits package is built around your work-life balance and includes: Flexible working, flexi hours and flexi days Hybrid working: some time in a hub with the team, some time at home Family-friendly policies Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Working in an award-winning environment and culture Professional development, coaching, mentoring and career progression opportunities. Process. Stage 1: Application Stage 2: Interview We know how valuable your time is. We have a clear and succinct hiring process with only TWO STAGES . Click apply now to see the full job description and get started with the next step in your career at DWP Digital .