Fixed Term Contract until January 2027
As digital transformation continues to shape how we operate, the security and integrity of our systems and data are critical.
We're looking for a skilled and proactive Cyber Security Specialist to join our Cyber team. Working collaboratively with the wider DDaT function, you will play a central role in monitoring, detecting, and responding to cyber threats and vulnerabilities - helping to protect our digital infrastructure, our residents, and our colleagues.
About You
You're an analytical thinker with hands‑on experience in cyber security and a strong understanding of threat detection, risk mitigation, and vulnerability management. Comfortable working across technologies and teams, you're able to apply technical knowledge with sound judgment, and you communicate clearly - whether advising a peer or presenting to a senior stakeholder.
You're calm under pressure, focused on detail, and passionate about keeping systems secure and resilient. Above all, you care about using your skills to protect people and make a positive impact.
Roles & Responsibilities
Security Monitoring & Threat Response
* Monitor, analyse, and respond to security events using Microsoft security tools, SIEM platforms, and EDR solutions.
* Conduct threat hunting, investigate anomalies, and escalate security incidents as needed.
* Manage security configurations in Entra ID and M365, including MFA, DLP, and privileged access policies.
* Coordinate annual penetration testing with external suppliers and follow through on remediation.
Vulnerability & Risk Management
* Collaborate with DDaT colleagues to conduct vulnerability assessments, validate findings, and recommend mitigation strategies.
* Maintain endpoint protection, MDM, and Defender Suite configurations.
* Support and contribute to the Cyber Risk Management Framework.
Incident Management & Reporting
* Lead investigations into incidents, documenting root cause, actions taken, and lessons learned.
* Record metrics and provide regular reports to senior leadership.
* Continuously review email and web filtering tools to prevent phishing, malware, and other key threats.
Collaboration & Culture
* Deliver cyber awareness training and assist with onboarding for new colleagues.
* Support wider teams (Legal, Data Protection, Delivery) with cyber security advice.
* Promote a security‑first culture through engagement, education, and communication.
Governance & Documentation
* Assist in maintaining and reviewing security policies and procedures.
* Support audits, third‑party risk assessments, and compliance activities.
* Align work with relevant standards such as ISO 27001, Cyber Essentials, and NCSC, DSPT and CAF.
Qualifications & Experience
Essential
* Degree in Cyber Security, Computer Science, IT, or equivalent practical experience
* Industry certifications such as: CompTIA Security+, CEH, or Microsoft Security (e.g., AZ‑500, SC‑200, SC‑300, SC‑400, SC‑100 etc.)
* Strong knowledge of Microsoft security tools, Defender Suite, Entra ID, M365, network security, SIEM platforms, endpoint protection, email/web filtering protocols (SPF, DKIM, DMARC), penetration testing tools, vulnerability management, risk management, and incident management.
Desirable
* Familiarity with ISO 27001, ISO 27005, Cyber Essentials, GDPR
* Experience working within an ITIL environment, including incident and problem management
* Knowledge of audit processes and cyber governance frameworks
This role is offered on a hybrid working basis.
Rewards & Benefits
* Award‑winning learning and development
* 25 days annual leave
* An opportunity to learn from experienced colleagues as part of an outstanding and committed team.
* GP online – providing around the clock GP consultation via an interactive app – available to you and your children under 16
* Colleague discounts – Access to over 1600 high‑street discounts including carefully selected discount partners
* Wellbeing – free of charge access to an independent and confidential Employee Assistance Programme. This gives colleagues and family access to 24/7 365 support for a whole range of issues including physical, mental, and financial issues
#J-18808-Ljbffr