Security Operations Analyst

The role

As a Security Operations Analyst you will be part of a small team that is responsible for monitoring and maintaining the security of Gateley's IT infrastructure, software, and users.

• Be responsible for the day-to-day operation and maintenance of security tools and controls.
• Proactively monitor the firm's network and computing infrastructure, review reports and respond to threat intelligence and alerts.
• Raise and manage incidents and changes, remediate vulnerabilities, and implement improvements in IT Security.
• Prepare and present routine reporting of agreed security KPIs and of compliance with policy and security certifications.
• Work with other members of the IT Team and the wider business as 2nd line support where IT Security input is required for BAU or project activities.
• Conduct simulated phishing tests and manage delivery of online security training and awareness campaigns.
• Maintain and develop your knowledge of IT Security, industry trends, technology, and threats.
• Assist third-party providers of security services with penetration testing and security auditing and certification.
• Contribute knowledge and expertise in relation to the secure design of new services.
• Liaise with relevant suppliers where required.
• Participate in the resolution of incidents escalated to the team.
• Identify opportunities for improvement.
• Ensure that all system and operating documentation is up to date and available to the appropriate teams.

Due to the nature of the team you may from time to time be asked to undertake ad-hoc tasks outside of your core responsibilities.

The team

Gateley Plc has a dynamic and collaborative IT department. We are growing our team to 55 staff members in total across IT Service, Infrastructure, Architecture, Security, Change Management, Development, Innovation and Client Solutions.

The Information Security Team is responsible for monitoring the Gateley network for suspicious activity, identifying vulnerabilities, responding to security incidents, and collaborating with IT and the wider business to reduce risk and improve security controls.

In a constantly changing and evolving IT environment, you'll use a collection of security tools to measure and maintain our compliance with policies, standards, and external certifications such as Cyber Essentials Plus.