Cyber Security Analyst

The Cyber Security Analyst supports the Society in maintaining an effective, proportionate and well-evidenced cyber security risk and control environment.

The role focuses primarily on supporting cyber risk management, assurance and governance activities including policy management, third-party cyber due diligence, training and awareness, control effectiveness monitoring and risk reporting. The post holder will also provide supporting input into security engineering activities, helping ensure controls are designed, operated and evidenced appropriately.

This role supports senior management and Board-level committees to understand, monitor and manage cyber risk in line with the Society’s risk appetite and regulatory expectations., * Support the identification, assessment and ongoing management of cyber and information security risks.

• Support the maintenance and updating of cyber risk registers, ensuring risks are clearly articulated, owned and reviewed.
• Support the monitoring of risk treatment plans, tracking progress and highlighting issues where required
• Assist in the preparation of cyber risk reporting and management information for governance forms.
• Support the maintenance of cyber security policies, standards and supporting documentation, ensuring they remain current, clear and aligned to regulatory expectations and organisational practises.
• Assist with policy communications and help to ensure relevant stakeholders are aware of their responsibilities.
• Perform cyber security due diligence on third-party suppliers and service providers, including reviewing supplier security questionnaires and evidence plus helping to document risks associated with outsourcing and cloud services
• Support ongoing assurance of key suppliers, including periodic reviews and issue tracking.
• Assist with maintaining appropriate documentation and evidence to support audit and regulatory scrutiny.
• Support the development and maintenance of cyber security control effectiveness metrics and evidence.
• Provide assurance input into the design and implementation of security controls and technologies, ensuring alignment with policy and risk requirements.
• Support activties such as vulnerability management, access reviews and security tooling reviews from a governance and control perspective, rather than a primary operational role.
• Assist in documenting security processes and standard operating procedures.

• Degree in an IT related discipline.
• A minimum of 1 year experience in cyber security risk, assurance or governance roles.
• Practical understanding of enterprise risk management and information security risk management.
• Understanding of cyber security principles, controls and common threat types.
• Experience working with information security / cyber security providers and wider supply chain.
• Experience supporting or contributing to: Cyber risk assessments, Policy and standards development, Third-party cyber due diligence, Operational resilience
• Ability to produce clear documentation and management-level reporting.
• Practical understanding of information security standards such as ISO27001, NIST or similar.

Desired criteria

• A qualification in a Cyber Security related discipline.
• Exposure to financial services or other regulated environments.
• Experience supporting audits or regulatory reviews.
• Working knowledge of security tooling and control implementation.
• Experience with Microsoft Security & Identity Stack, Secure Software Development, Vulnerability Management and Security Testing Frameworks.

Progressive Building Society is a leading local financial institution with a proud reputation for customer service excellence. Our purpose is to encourage local people to save and become homeowners, through our personal, caring & common-sense approach, essentially nurturing financial wellbeing for current and future generations.