Cyber Security Analyst

Job Description

Ideas | People | TrustWe’re BDO. An accountancy and business advisory firm, providing the advice and solutions entrepreneurial organisations need to navigate today’s changing world.We work with the companies that are Britain’s economic engine - ambitious, entrepreneurially-spirited and high-growth businesses that fuel the economy - and directly advise the owners and management teams that lead them.We’ll broaden your horizonsTo ensure our services and applications are fit for the modern market, our IT team collaborates with every department. They develop, they explore and they implement the new ideas helping us to change the future of accounting, tax and business consulting.But, just as importantly, they maintain the tech that keeps us advancing. By testing and adopting the future of financial technical solutions, they find new and exciting ways to drive us forward. And you could too. In an IT role at BDO, you’ll become partof a team that act as the backbone for our business. No matter who you are or what your skillset is, we’ll give you the training and support you need to achieve whatever you put your mind to.We’ll help you succeedLeading organisations trust us because of the quality of our advice. That quality grows from a thorough understanding of their business, and that understanding comes from working closely with them and building long-lasting relationships.You’ll be someone who is both comfortable working proactively and managing your own tasks, as well as confident collaborating with others and communicating regularly with senior managers, directors, and BDO’s partners to help businesses effectively. You’llbe encouraged to identify and draw attention to opportunities for enhancing our delivery and providing additional services to organisations we work with.The Cyber Security Analyst role is key in ensuring risk based, cost effective and integrated IT security controls are implemented and maintained.Within this role, you will assume operational responsibility for the implementation and maintenance of Cyber Security technologies and additionally recommend/implement areas of improvement to address IT Security risks. You will work closely alongside theSecurity Operations Manager and the operational teams in ensuring IT security controls are effectively implemented and maintained. You’ll also:

• Maintain the suite of Cybersecurity controls across BDO including: CASB, SWG, EDR/XDR, E-mail Security, Data Loss Prevention, Cloud-Native and Network-Based security controls.
• Assist with coordinating the implementation of secure technology controls based on business risk across all areas of IT infrastructure/services
• Assist with coordinating and undertake implementation of procedures to ensure security controls are considered in operational tasks, project delivery and IT governance processes.
• Create and update Knowledge Base articles to promote shift left and self-service within the operational teams
• Create high quality supporting documentation of the cyber security controls and platforms in place and assist in tracking any agreed exceptions
• Be the SME for all Cyber security platforms, engaging with relevant 3rd party Technology partners where required
• Report on the technical aspects of security management against pre-defined Cybersecurity operational metrics.
• Maintain day-to-day relationships with suppliers who provide support for security specific service-level agreements.
• Day-to-day management of operational requests and break fix incidents, including: Reporting, Knowledge Management, Root Cause Analysis and Proactive Problem Repetition Avoidance.
• Contribute to the day-to-day activities of threat and vulnerability management, deliver risk reduction activities, recommend treatment plans and communicate information to the Head of IT Security regarding inherent vs residual risk. Ensure audit trails,system logs and other monitoring data sources are reviewed periodically and follow policies and audit requirements.
• Maintain the suite of Cybersecurity controls across BDO, ensuring that appropriate operational processes are defined, to define, assure and mature these technology stacks, including: CASB, SWG, EDR/XDR, E-mail Security, Data Loss Prevention, Cloud-Native& Network Security controls. Continually assess existing Service Desk security processes through defined test plans to validate process efficacy.
• Contribute to the development of a Cybersecurity Operations Resource and Capacity planner managed through BDO’s Azure DevOps environment.

You’ll be someone with:

• AZ-500, SC100/200/300 (Desired)
• CCSP/SSCP (Desired)
• Previous experience in Cybersecurity
• Proven experience in IT Operations
• DLP, EDR/XDR, CASB, E-mail Security, SWG and ZTNA/SASE
• Experience in managing complex deliveries of technical projects.

You’ll be able to be yourself; we’ll recognise and value you for who you are and celebrate and reward your contributions to the business. We’re committed to agile working, and we offer every colleague the opportunity to work in ways that suit you, your teams,and the task at hand.At BDO, we’ll help you achieve your personal goals and career ambitions, and we have programmes, resources, and frameworks that provide clarity and structure around career development.