Senior Cyber Security Analyst – Hattersley

Manchester, Lancashire
MWH Treatment Limited

aMWH Treatment is looking to strengthen their IT team with a Senior Cyber Security Analyst. Based from the Head office in Hattersley, with some home working, you will help to strengthen the current MWHT Business Security Systems team in providing adedicated focus on emerging cyber security threats.

You will report directly to the Head of IT and the responsibilities will include:

Security Operations

• Day-to-day endpoint monitoring of all cyber security incidents.
• Identify, prioritise, and manage security incidents.
• Bring incidents to successful conclusions with thorough remediation plans.
• Conduct Post-Incident-Reports
• Monitoring and actioning reported phishing alerts.
• Work closely with managed IT provider, parent company, JV Partner and Client IT teams oversee all cyber security recommendations AH1 .
• Support information security team

Vulnerability Management

• Notify requirements to address security deficiencies.
• Conduct vulnerability analysis and create impact assessments.
• Conduct risk assessment of vulnerability reports and impact risks to service
• Manage Pen Testing process. Prioritise and action Pen Test recommendations.
• Identify and communicate current and emerging information security threats to stakeholders.
• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement.
• Assist with management and remediation of identified vulnerabilities.

Security Audit

• Support internal audits, security assessments and security incident reviews.
• Report audit and incident review findings, including corrective action suggestions.
• Conducts follow up remediation and track findings from previous audits and incidents through to closure.
• Conduct Education and cyber awareness training events
• Produce Security Assurance Review and Assessment Reports, and present findings to stakeholders.
• Work closely with managed IT provider to oversee design specifications according to information security policies, while fulfilling business needs
• Assist security reviews on third party systems and applications.

Data Protection

• Assist the business with data protection queries.
• Support the company data protection officer in ensuring company compliance to the Data Protection Act, NIS and other regulatory and contractual requirements.

Essential: Experience working in cyber security within M365 Defender and Hybrid environments. Proficiency in cloud security technologies and tools (i.e., Azure Security Center, Microsoft Defender) Working knowledge of security frameworks and standards such Cyber Essentials + and ISO 27001 The vigilance and attention to detail needed to stay up to date on the latest security changes and challenges.