Cyber Operations Analyst

Support the Bank's operational cyber security capability through cyber security monitoring, incident response coordination, vulnerability management, supplier assurance and operational reporting activities.

To place the interests of customers at the centre of all activities, act in a way that is consistent with achieving good outcomes for consumers; and to comply with the FCA and PRA's Conduct Rules.

• Support the day-to-day oversight of outsourced cyber security services, including Managed Detection and Response (MDR), Security Operations Centre (SOC) and threat monitoring providers.
• Coordinate cyber security alerts, incidents and escalations, ensuring actions, decisions and outcomes are appropriately recorded and tracked.
• Act as Incident Coordinator during cyber security incidents, supporting incident management, communications, action tracking and post-incident activities.
• Maintain incident, vulnerability, threat intelligence and operational cyber security registers, ensuring records remain accurate and up to date.
• Monitor vulnerability remediation activities and track progress against agreed remediation targets and risk tolerances.
• Support cyber threat intelligence activities, including the production of threat updates, reporting and management information.
• Support the operational effectiveness of cyber security tooling and services, ensuring incidents, alerts and service performance are appropriately monitored and reported.
• Coordinate penetration testing activities, remediation tracking and assurance reporting.
• Support supplier security reviews and third-party assurance activities, including evidence collection, action tracking and reporting.
• Assist with cyber incident exercises, tabletop simulations and operational resilience testing activities.
• Maintain cyber operational procedures, playbooks, runbooks and supporting documentation.
• Produce cyber operational dashboards, management information, Key Risk Indicators (KRIs) and performance metrics.
• Monitor service performance against agreed cyber security service levels, KPIs and contractual obligations.
• Support attack surface management, threat exposure management and cyber hygiene improvement activities.
• Analyse operational cyber security data and identify trends, risks or issues requiring escalation.
• Develop professional knowledge and capability across cyber operations, incident response, threat management and cyber security disciplines.

***This role is currently only open to employees of Arbuthnot Latham***

• Cyber Operations & Third-Party Security Manager
• Head of Cyber
• Cyber Governance & Compliance Manager
• Cyber Assurance & Architecture Manager
• IT Infrastructure & Operations
• Digital Workplace Team
• Service Desk
• Operational Resilience Function
• Risk & Compliance
• Third-Party Suppliers
• Managed Security Service Providers (SOC/MDR)
• Internal and External Auditors