Cyber Resilience Analyst

We’re recruiting a Cyber Resilience Analyst to join an established organisation and play a key role in strengthening its ability to respond to, recover from and learn from cyber incidents.

This is a varied position combining hands-on technical recovery testing with Business Continuity, Incident Response and Cyber Recovery planning. You could be testing the recovery of a critical system in the morning and working with stakeholders on Business Continuity and recovery strategy in the afternoon.

The role

You’ll be responsible for helping define, maintain and test resilience plans across the organisation, working closely with teams throughout IT and the wider business.

Key responsibilities will include:

• Analysing business systems to understand cyber-incident impact, dependencies and recovery paths
• Maintaining and testing Business Continuity, Incident Response and Cyber Recovery plans
• Conducting practical system recovery and resilience testing
• Contributing to incident reviews and ensuring lessons learned improve future resilience
• Identifying and escalating weaknesses within resilience strategies
• Working with project and change teams to ensure resilience is considered in new developments
• Producing clear resilience documentation, plans and reports
• Working with technical and non-technical stakeholders around recovery planning

You’ll need previous experience within cyber resilience and recovery, with exposure to areas such as:

• Business Continuity
• Incident Response
• Cyber Recovery / Disaster Recovery
• Enterprise IT environments
• Resilience and recovery planning
• Technical documentation and report writing
• Stakeholder communication

You’ll also need strong attention to detail and the ability to manage complex plans involving multiple systems and stakeholders.

Desirable experience

Experience with any of the following would be useful:

• Microsoft Azure, particularly Azure Site Recovery (ASR) and Recovery Services
• Rubrik or similar cyber-recovery platforms
• Microsoft Defender
• Communicating technical concepts to non-technical audiences