Cyber Security Analyst

As a Cyber Analyst, you will play a key role in protecting Natural Resources Wales’ (NRW) digital services, information, systems and users from cyber threats. You will provide technical cyber security support across the organisation, investigating incidents, responding to security alerts, supporting remediation activities, and helping to maintain the confidentiality, integrity and availability of ICT services.

Working as part of the Digital, Data and Technology (DDaT) security function, you will support operational cyber security activities and work closely with the ICT Service Desk, infrastructure teams, information security colleagues and wider business areas. The role involves responding to security incidents and service requests, using Microsoft security technologies, including Microsoft Defender and related tools, and helping to ensure security controls remain effective across a multi-site and hybrid working environment.

You will contribute to NRW’s cyber resilience through supporting incident response, vulnerability management, security monitoring, exception management, threat intelligence review, technical documentation and the continuous improvement of security processes. Cyber incident response forms a key part of the wider cyber security lifecycle, helping to identify, protect, detect, respond to and recover from cyber incidents.

Driving is essential to this role The post may be required to work from another government department’s office in the event of a major national cyber security incident. You must hold a full and current UK driving license.

As an organisation we support flexible working. You will be contracted to the nearest NRW office to your home and a suitable hybrid working pattern will be agreed on appointment. Any regular face to face meetings or training will be planned in advance., * Take responsibility for incidents and requests within the team’s scope, using experience and problem-solving skills to investigate and resolve in a timely and efficient manner.

• Engage in clear communications with staff to manage and resolve incidents, remediation and exception management. Use Defender and ATP to investigate and resolve hardware and/or software security incidents.
• Maintain a strong relationship with the ICT Service Desk to share 2nd line expertise, and peers in other operational teams to develop a robust problem management team, working closely to investigate ongoing issues.
• Collaborate with the ICT Infrastructure team to support and recommend security configurations.
• Use a range of research techniques to keep up to date with trends in relevant technologies, to recommend the strategic direction of NRW’s technical solutions and identify cost savings.
• Act as subject matter expert in specialist areas.
• Undertake health and safety duties and responsibilities appropriate to the post
• Be committed to Natural Resources Wales Equal Opportunities and Diversity Policy , together with an understanding of how it operates within the responsibilities of the post
• Be committed to your own development through the effective use of your personal development plan (known as Sgwrs).
• Required to take part in incident response activities.
• Any other reasonable duties requested commensurate with the grade of this role., Natural Resources Wales is unable to offer visa sponsorship for this position. Although we hold a Skilled Worker visa sponsorship licence, it applies only to specific roles that meet both the eligibility criteria and salary requirements set out by the UK Government under the Skilled Worker visa route.

Your qualifications, experience, knowledge and skills In your application and interview you will be asked to demonstrate the following skills and experience using the STAR method.

• High level of technical expertise and skills focusing on security systems and associated technology in a networked environment over multiple sites, holding the following certifications/qualifications or be working towards them:
• ITIL Foundation certified and having worked in an ITIL environment.
• Degree in ICT, or equivalent.
• Experience of security tools.
• Excellent verbal and written communication skills, comfortable and confident in dealing with challenging situations/individuals and a clear commitment to delivering excellent customer service and user’s experience.
• Ability to analyse ICT issues and requests, utilising the appropriate analysis techniques. To do this, it is important to be able to absorb new information readily, as new systems are brought into the team’s remit and be able to understand and document user requirements.
• Ability to work within a high-pressure environment, to proactively plan and co-ordinate resources in order to achieve results within agreed timescales and with a flexible approach to working, prioritising as and when high priority problems and requests arrive at the ICT Security Team.

• You should be able to pass Baseline personnel vetting (BPSS). Welsh Language level requirements

• Essential: Level A1 - Entry level

Welsh language levels

Please note if you do not meet the A1 requirement i.e., ability to understand basic phrases and ability to pronounce Welsh names correctly, then NRW offers a variety of learning options and staff support to help you meet these minimal requirements during the course of your employment with us. Additional Information Due to the nature of the work the successful candidate must be eligible for Security Check (SC) clearance. This generally requires five years’ continuous residency in the UK. Further details on eligibility can be found on National security vetting: clearance levels - GOV.UK . Offers will also be subject to a satisfactory Disclosure and Barring Service Check (DBS) check.

Successful applicants will be subject to a satisfactory Disclosure and Barring Service Check (DBS) check. Appointments are normally made within 4 to 8 weeks of the closing date.

This role will offer a range of benefits, including:

• Civil Service Pension Scheme offering employer contributions of 28.97% (successful internal staff will remain in their current pension scheme)
• 28 days annual leave, rising to 33 days
• generous leave entitlements for all your life needs
• commitment to professional development
• health and wellbeing benefits and support
• weekly wellbeing hour to use as you choose

See full details for all the employee benefits you will receive. Please keep reading We’re passionate about creating a diverse workforce and positively encourage applications from under-represented communities. We embrace equality of opportunity irrespective of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex and sexual orientation.

We are committed to equal opportunities, and we guarantee interviews for candidates with disabilities who meet the minimum selection criteria.

We want to attract and retain talented and highly skilled staff, so we make sure that our pay scales remain competitive. We advertise the full pay scale on our job descriptions. Appointed candidates start at the first point of the pay scale and annual increments are paid each year.

We want our staff to grow professionally and personally. From leadership development to access to further and higher education courses, our staff have opportunities to expand their knowledge on variety of topics, stay current in their field and continue to learn as their career progresses.

We are a Bilingual organisation which complies with the Welsh Language Standards. Welsh language skills are considered an asset to NRW, and we encourage and support staff to learn, develop and use their Welsh language skills.

True

Natural Resources Wales (NRW) is the largest Welsh Government Sponsored Body, committed to protecting and enhancing the natural environment of Wales. We play a vital role in the sustainable management of natural resources, helping to safeguard land, water, biodiversity and natural resources for future generations.

The DDaT Security team sits within the wider Digital, Data and Technology function and supports NRW in delivering its environmental and regulatory responsibilities through secure, resilient and effective digital services.