About this role
About the role
Cyber Security is at the heart of University strategic decision-making. We attract students not only by providing them with world-class learning opportunities, but also by providing assurances about the protection of their sensitive data, creating a secure learning environment, and keeping them safe online.
Our ability to generate competitive advantage in the award of research grants and sponsorships is tied closely to our cyber security values and behaviours. Ensuring we’re a safe and secure organisation to do business with, protecting corporate interests and data throughout the supply chain.
The Security Operations Analyst is part of a team responsible for a broad range of cyber security tasks and activities, including management and operation of the University’s Security Operations Centre (SOC), operating and applying security controls in line with standard frameworks – ISO 27001, NIST CSF, Cyber Essentials – and facilitating risk-based decision-making to ensure maintenance of security posture.
You will be responsible for undertaking all aspects of security operations, including responding to and resolving security events and incidents, identifying vulnerabilities, deploying mitigation tactics and escalating where appropriate, safeguarding sensitive information from unauthorised access, and generally maintaining security posture in line with the University’s risk appetite.
Additionally, you will undertake risk assessments and perform horizon scanning, ensuring that the University control environment is optimally configured to respond to the latest threats to maintain resilience and continuity of service across key systems, services and infrastructure.
You will be expected to review security processes, systems and capabilities that affect the security of our most critical assets. You will proactively work with colleagues to identify areas of weakness and exposures and create recommendations for continual improvement.
As appropriate, you will take part in change approval boards, oversee the security elements of delivering new products and services into live University environments, and work closely with vendors.
This role is offered on a full-time (36.5 hours per week) permanent basis.
This role includes a market supplement of £3,500 in addition to the base salary scale.
For an informal discussion about the role, please contact Martin D. G. Parsons, Security Operations Manager, at [email protected] or Neil Toyne, Principal Cyber Security Architect, at [email protected]. However, please ensure that you submit your application through the University of Bath website.
About you
- A broad knowledge of security risk and assurance practices, including detailed knowledge of security control frameworks: ISO 27001/Cyber Essentials/NIST CSF/NIS/CIS Top 20/OWASP.
- Experience of regulatory and compliance responsibilities for universities, including GDPR, DPA, PCI DSS, and Ofsted.
- A broad technical knowledge of various tools, how to operate and maintain them, interpret the output, and apply the recommendations.
- Excellent practical experience and knowledge of measuring the performance and effectiveness of security controls to reduce incidents, safeguard sensitive data, and improve overall security posture.
- Knowledge and understanding of reducing risk and exposure across third parties and throughout the supply chain.