£500 Per day
Undetermined
Undetermined
Sheffield (S10)
Summary: The Cyber Security Analyst role involves contributing to the cybersecurity strategy, engaging with stakeholders, and promoting a customer-centric security culture. The position requires collaboration with cybersecurity teams to enhance operations and ensure compliance with global regulations. The analyst will also support incident response plans and governance reporting while fostering continuous improvement in security processes. Strong communication skills and a deep knowledge of security frameworks are essential for success in this role.
Key Responsibilities:
- Contribute to and execute on the cybersecurity strategy, embedding best practices and aligning initiatives with business goals and risk appetite.
- Support relationships with senior executives, Boards, regulators, and external partners, communicating security topics clearly to all stakeholders.
- Promote a customer-centric security culture, leveraging cybersecurity to enhance operations and customer advocacy.
- Support the regular review and refinement of security processes, controls, and technologies, incorporating feedback and industry best practices.
- Guide senior management on cybersecurity risk, ensuring compliance with global regulations and standards (e.g., NIST, ISO 27001, GDPR, FCA).
- Serve as the main contact for audits and assessments.
- Prepare clear, actionable reports and presentations to Boards and committees, translating technical risks into business intelligence.
- Oversee incident response plans and responses to major security incidents.
- Set the tone for cybersecurity practices and contribute to global standards, increasing awareness and risk reduction.
Key Skills:
- Minimum 3+ years’ experience in risk management, cybersecurity, technology audit, or IT roles.
- Bachelor’s degree in a technology-related field or equivalent experience.
- Professional security certification (e.g., CISSP, CISM, CISA, CRISC).
- Deep knowledge of security frameworks and best practices (ISO/IEC 27001, NIST).
- Proven experience in supporting and implementing security strategies.
- Strong written and verbal communication skills, with the ability to influence stakeholders.
- Demonstrated collaboration with cybersecurity teams and initiatives.
- Proficient in technical disciplines and security/risk methodologies.
- Willingness to travel as required.
Salary (Rate): £500 per day
City: Sheffield
Country: United Kingdom
Working Arrangements: undetermined
IR35 Status: undetermined
Seniority Level: undetermined
Industry: IT
Requirements
- Minimum 3+ years’ experience in risk management, cybersecurity, technology audit, or IT roles
- Bachelor’s degree in a technology-related field or equivalent experience
- Professional security certification (e.g., CISSP, CISM, CISA, CRISC)
- Deep knowledge of security frameworks and best practices (ISO/IEC 27001, NIST)
- Proven experience in supporting and implementing security strategies
- Strong written and verbal communication skills, with the ability to influence stakeholders
- Demonstrated collaboration with cybersecurity teams and initiatives
- Proficient in technical disciplines and security/risk methodologies
- Willingness to travel as required
The role holder will:
- Strategy: Contribute to and execute on the cybersecurity strategy, embedding best practices and aligning initiatives with business goals and risk appetite.
- Stakeholder Engagement: Support relationships with senior executives, Boards, regulators, and external partners. Communicate security topics clearly to all stakeholders.
- Customer Focus: Support in promoting a customer-centric security culture, leveraging cybersecurity to enhance operations and customer advocacy.
- Continuous Improvement: Support the regular review and refinement of security processes, controls, and technologies, incorporating feedback and industry best practices.
- Risk Management & Compliance: Support in guiding senior management on cybersecurity risk, ensuring compliance with global regulations and standards (e.g., NIST, ISO 27001, GDPR, FCA). Serve as the main contact for audits and assessments.
- Governance & Reporting: Support the preparation of clear, actionable reports and presentations to Boards and committees, translating technical risks into business intelligence.
- Incident Response: Support in overseeing incident response plans and responses to major security incidents.
- Policy & Awareness: Support in setting the tone for cybersecurity practices and contribute to global standards, increasing awareness and risk reduction.