Job description
JOB TITLE: CYBER SECURITY ANALYST
DEPARTMENT: TECHNOLOGY
LOCATION: Marble Arch, London (Hybrid)
REPORTING TO: Head of Information Security
TYPE OF CONTRACT: Fixed Term – 6 months
PLACES, PEOPLE, PREFER
Our purpose is to create and manage outstanding places which deliver positive outcomes for all our stakeholders on a long term, sustainable basis.
We are a FTSE 100 business with a strong balance sheet and over £13bn of assets under management. But with just 600 employees you’re given the ability to make a big impact and elevate your career quickly.
Our diverse, passionate team of experts works on some of the most ambitious, innovative and sustainable projects in the country – from our high-quality campuses across central London, to some of the top retail schemes in the UK – providing a rewarding career journey where you can shape how you grow.
We believe in shared success and enabling people to be themselves. If you want to feel listened to and understood in an environment where your opinions count and bright ideas are encouraged, you’ve come to the right place!
In our recent engagement survey 93% of our employees stated they were proud to work for
British Land!
THE ROLE
The role of the cyber security analyst is to protect British Land information, systems and infrastructure. The candidate will research, support and operate relevant tools to analyse security risks and support projects to ensure British Land security processes are followed and implemented. The role reports to the Head of Information Security.
The Information Security Team is part of Group Technology and is responsible for the development, management and maintenance of the information & technology security governance, strategy, policies, systems and processes across the British Land group. Specifically, then team has the following responsibilities:
- Defining and monitoring security policies and best practice standards
- Providing awareness advice and guidance on risks and threats to the business
- Implementing appropriate controls, processes and solutions throughout the organization
- Monitoring alerts and events, including threat response and escalation
- Evaluating the security posture of vendors and their products
- Drive the design and implementation of secure systems
WHAT YOU’LL DO
The role of the cyber security analyst is to protect British Land information, systems and infrastructure. The candidate will research, support and operate relevant tools to analyse security risks and support projects to ensure British Land security processes are followed and implemented. The role reports to the Head of Information Security.
- Performing Supplier Risk Assessments to ensure that third parties meet British Land’s standards
- Assist in scheduling and managing Penetration Tests across British Land applications, sites and core infrastructure
- Working closely with other Group Technology colleagues to ensure cyber security and software development best practices are in place
- Assisting with security reviews of for new systems or upgrades to existing systems
- Assist in vulnerability scanning and management, and management of other cyber security tools
- Supporting Technology projects with security analysis on any proposed solutions & ensuring any risks are highlighted and addressed as part of the project
- Assist in maintenance of Information Security Management System, policies and procedures
- Assist in internal or external audits
- Assist in Change Control processes
- Liaise with internal users, clients and third parties
ABOUT YOU
We are seeking somebody who is passionate about Information Security, is dynamic, engaging, has excellent written and oral communication skills, and is self-motivated and can work independently. You will be able to demonstrate the ability to lead by example and communicate in an inspiring and motivational manner. In addition, you should possess a range of skills and experience across the following:
- Experience working as a security analyst with solid experience in Information Security
- Experience with Penetration Testing and techniques
- Maintaining and supporting an ISMS
- Supplier management, and performing supplier risk assessments
- Experience of working in an IT department and a good working knowledge of Information Technology in general
- Performing security auditing and testing
- Implementation of security standards for development
- Implementation and management of security monitoring tools
- Ability to manage project change ensuring the deliverables still align to the objectives
- Experience of liaising with third party suppliers and ensuring they are a part of the project journey
- Experience of BCP/DR planning
- Good experience of Office 365
- Experience of Information Security frameworks, such as ISO 27001, NIST, COBIT
- Any Information Security related certifications would be beneficial
- Good understanding of or working experience of:
- Cloud security (CASB)
- Identity and access management solutions (IAM)
- Privileged access management solutions (PAM)
- Security Incident & Event Monitoring (SIEM)
- SOC team experience
OUR SHARED VALUES
our values are what we stand for at British Land, they’re not just a label on the door; they connect us every day to our vision, purpose, and strategy. They help us to promote an inclusive, positive, and collaborative culture. You can read more on our corporate website.
BRING YOUR WHOLE SELF
LISTEN & UNDERSTAND
SMARTER TOGETHER
BUILD FOR THE FUTURE
DELIVER AT PACE
A REWARDING PLACE TO BE
Our People – Just ask anyone why they love working here and they will tell you it’s the people. They’re highly talented, passionate, and collaborative! We thank our people with rewards that feel rewarding; you can review our market leading benefits here.
OUR RECRUITMENT PROCESS
IF YOU ENJOY BRINGING YOUR WHOLE SELF TO WORK, SHARE OUR VALUES AND ARE EXCITED ABOUT OUR PURPOSE WE’D LOVE TO HEAR FROM YOU! WE ARE COMMITTED TO PROVIDING AN ACCESSIBLE AND INCLUSIVE PROCESS LEARN MORE ABOUT OUR SELECTION PROCESS HERE.
#LI-HYBRID
Please note that we endeavour to get back to all applicants within 28 days. If you haven’t heard from us within this period, please assume that you have been unsuccessful on this occasion.