Infrastructure Cyber Security Analyst - Bristol

Job Introduction

DACBeachcroft has an exciting opportunity for an experienced and knowledgeable Cyber Security Analyst to join our IT team on a full-time, permanent, hybrid basis in our Bristol office. 

Reporting directly into the Head of Cyber Security, the main purpose of this role is to monitor, maintain and advance the effective use of technical cyber security controls that are actively in use by DACB, evolve and mature the firm’s capability for detecting and responding to cyber incidents, assist with security incidents and investigations, monitor, maintain and advance the effective use of technical cyber security controls that are actively in use by DACB, assist in the research, selection and deployment of new technical security controls for use by DACB, support the firm’s safe advancement with new technology and ways of working by leading the design, creation and application of appropriate technical security policies, and advise on matters related to cyber security, such as in the support of procurement and project activity.

We are a Disability Confident employer and guarantee to interview anyone with a disability, long term health condition or neurodiversity whose application meets the essential criteria for the role.  If this applies to you and you feel you meet the minimum criteria for this vacancy as set out in this advert then please contact recruitment@dacbeachcroft.com in confidence, quoting the reference number for this vacancy in the subject box of your email, and a member of the Recruitment team will be in touch.

Role Responsibility

• Provide a point of technical authority and governance for the effective use of technical security controls across the firm.
• Develop a deep understanding of DACB’s regulatory and client/contractual obligations for cyber security, and the requirements of standards such as ISO27001, GDPR and Cyber Essentials Plus.
• Work closely with IT Operations to ensure critical business assets are adequately protected from cyber-related threats through the use of appropriate technical controls.
• Document and raise non-conformities with the Head of Cyber Security.
• Produce regular reporting to demonstrate the effectiveness of technical security controls and identify gaps and recommendations where needed.
• Work closely with Procurement and PG&R teams on supplier due diligence activity.
• Act as a point of contact in the support of cyber-related audits and certifications.
• Manage 3rd party security (supplier) relationships and assist in the development of existing relationships and the competitive selection of new suppliers.
• Assist with ongoing colleague education related to cyber security, helping with phishing simulations, awareness campaigns and ad-hoc queries that come into the team.
• Support incident investigations.
• Help to develop strategies and roadmaps for cyber security technology, in step with the IT Strategy and other business planning activity.
• Deputise for the Head of Cyber Security as required.

The Ideal Candidate

Technical requirements for the role are:-                                

• Experience working in a similar Cyber Security/IT Security Analyst role or to have a strong technical background in IT Infrastructure.
• A good understanding of ISO 27001, Cyber Essentials/Essentials Plus, GDPR and other information security-related regulatory and compliance standards.
• An excellent understanding of security threats, attack scenarios, intrusion detection techniques and incident management.

A competent understanding of the following:

• Cyber Security standards and frameworks (NIST, CIS, NCSC, Mitre Att&ck, Security Scorecard, M365/Azure Security Center).
• Strong skills in one or more Microsoft platforms (Azure Security Center, SIEM, Defender ATP, M365 Security, Data Compliance and Governance, PIM & PAM)
• Network and security systems ( Darktrace, Firewalls, NAC, Network segregation, remote access & wireless technologies)
• Strong Windows scripting skills
• Endpoint security.
• Windows Server technologies, Active Directory and Azure AD.
• Networking concepts (DNS, IP, segregation techniques)
• Cloud computing concepts and service models IaaS/PaaS/SaaS.
• Authentication concepts (Windows, AAD, Managed Identity).
• Microsoft 365 security and compliance.

The qualities needed to fulfil this roles are:-

• To have a genuine passion for Cyber Security and its technology, and a drive to continually develop professional and personal knowledge in this fast-moving area.  
• Be self-motivated and able to work to a high standard under own initiative.
• Able to pay and maintain close attention to detail.
• Have sound analytical skills; able to think laterally and challenge existing concepts.
• Have excellent commercial awareness with a good understanding of business drivers and priorities.
• Be a good and confident communicator at all levels; an ability to assert and defend a point of view can be balanced with pragmatism at times.
• Have the ability to understand technical complexities and issues, and be able to explain and translate these to a less technical audience.

About the Company

We are a leading international legal business with over 2,900 colleagues and a diverse range of capabilities. We have 11 offices in the UK as well as offices in Dublin, Madrid, Paris, Milan, Rome, Singapore, Argentina Chile, Colombia, Mexico and Miami. We also have associations/alliances with firms in Malaysia, Brazil, Peru, Central America, the USA, Australia and Germany.

We are a broad-based commercial firm with a strong heritage in insurance, health and real estate. This is complemented by a fast-growing Business Advisory capability. We represent a wide range of clients, ranging from household names to government departments and NHS bodies. We act for all of the UK’s top-ten insurers, we are market leaders in the provision of strategic, commercial and regulatory advice to providers and commissioners in the health sector, and in real estate we advise all of the UK’s top-12 housebuilders.

We have an impressive legal pedigree, with 142 Chambers UK 2021 practice area and individual lawyer rankings. In Legal 500 UK 2021, the firm received a top tier ranking for 37 of its practice areas, and 58 DACB lawyers were singled out in the ‘Leading Individual' rankings.

Our successes have been recognised by the legal industry and the markets in which we operate. These accolades include two top prizes in the ‘Excellence in Business Development’ and ‘Excellence in Technology & Innovation’ categories of the 2020 Law Society Excellence Awards – the highest accolade for law firms in England & Wales. Our health sector team won the ‘Crisis Management Team of the Year’ award at the 2020 British Legal Awards for its support to the NHS at the onset of the COVID-19 pandemic, and our Cyber & Data Risk team received the ‘Business Development Innovation Award’ at the 2020 Legal Innovation Awards, as well as ‘Cyber Law Firm of the Year’ at the prestigious Insurance Insider Cyber Rankings Awards, for its market-leading suite of digital tools to help our clients prepare for and respond to cyber and data risk crises.

Our vision is to be leading business advisers, recognised for our insight and our outstanding commitment to clients, and for being the place where talented people want to work. For further details on our work and our culture, please visit www.dacbeachcroft.com.

Application Details

At DAC Beachcroft, we don’t just accept your differences we celebrate them.  From bespoke solutions for our clients, to treating you like an individual.  Our strength comes from your diverse ideas and bringing the whole you to work. So if you’re good at what you do, come as you are.  We welcome direct applications and are happy to talk flexible working.

We also want you to be at your very best.  Please feel free to let us know of any changes we can make at any point in the recruitment process that will help support your application.  If this opportunity sounds of interest to you, please make an application and submit your CV.  Your application will be dealt with in the strictest of confidence.

Note for Recruitment Agencies – the DAC Beachcroft recruitment team is responsible for managing all current vacancies through direct hiring and referrals wherever possible.  We do work with recruitment agencies and where we require external support we will formally release those vacancies to the agencies on our Preferred Supplier List deemed best placed to assist us.  Speculative CVs sent by any agency to any DAC Beachcroft employee without a specific request by the recruitment team will not be accepted and with no introduction fee applicable.  Our recruitment team can be contacted at recruitment@dacbeachcroft.com

DAC Beachcroft