Information Security - Threat and Vulnerability Specialist
Location: Durrington (Worthing) Hybrid
Contract Type: Permanent
Hours: 37/week
Salary: Up to £75,000 DOE
This role will be working closely with our CISO in our Durrington offices, on a hybrid basis (flexibility to be on site as required is essential), you will be working both reactively and proactively while Southern Water goes through a huge Digital Transformation, where we are introducing new technology often.
On a day-to-day basis, you will be:
* Scoping and organising Pen Tests
* Managing scheduled and Ad Hoc scanning and other testing
* Converting findings into actions and tracking resolutions
* Using comprehensive Threat Intelligence feeds to map environments and take necessary actions
* Threat hunting
* Document and update, as appropriate information security policies, standards and processes: ensuring they stay up to date
* Supporting response to incidents
* Supporting the ongoing refinement of CMDB in IT and OT environments for mapping of Threat Intelligence
* Working closely with physical and personnel security, particularly in connection with CNI
* Responding to regulator queries
* Liaising with NCSC and other bodies
* Shaping and refining the Threat and Vulnerability Management approach and strategy
* Working with the project community to educate and plan testing, scanning and other considerations
* Advising and supporting executive leadership and other colleagues
About You
The most important thing is the right attitude; we want someone who can work flexibly, and be open to learn and grow with this role.
You will have experience in:
* Threat and vulnerability management in a complex organisation
* Monitoring threat levels and assessing potential impact
* Reviewing threat reports and making decisions on the best course of action; following through the issue through to resolution
* Prioritising threats and taking action accordingly
You will also have:
* Expertise in industry standard scanning tools and Threat Intelligence feeds
* Knowledge of ISO27001/ISO27002
* Excellent documentation and reporting skills
* Attention to detail
* Ability to work effectively within a team
* Good communication skills
* Ability to manage situations of complexity with positive outcomes
* Ability to clearly communicate actionable insights and complex findings
* Positive problem-solving ‘can-do’ attitude
* Innovative ways of working
* Ability to translate technically complex findings into layman’s terms
* An understanding of the differences between Corporate and ICS/OT environments
Preferable:
* Familiarity with NIS Regulations
* Familiarity with common ICS components
* Experience of Critical National Infrastructure
Package
This role will be full time Monday to Friday with a hybrid approach to working between our Durrington (Worthing) office and home.
We are offering a salary of up to £75,000 per annum depending on skills and experience as well as other benefits including:
* Generous pension up to 11% company contribution
* 25 days annual leave
* Life assurance equal to 4x salary
* Salary sacrifice electric car scheme (after 6 months service)
* Health Cash Plan
* Full funded eye tests
* Two paid volunteering days a year
* Occupational health service
* Discounts with over 800 popular retailers
* Digital GP service
* Study support may be available for job-related qualifications
* Competitive maternity leave and flexible return to work options
* Cycle to work scheme
Join our InfoSec team and see how far your career could progress with a company committed to career progression, training and development opportunities, our customers and the environment.
If this role isn’t quite what you’re looking for but are keen to be contacted about opportunities at Southern Water, you can register your details here: Introduce Yourself (myworkdaysite.com).
All applicants must be eligible to live and work in the UK. You will need to provide evidence of eligibility (e.g. a passport or long birth certificate and proof of NI) and current proof of address (dated within the last 3 months), will be required as part of the recruitment process. If you do not meet these criteria, your application will not be considered.
#J-18808-Ljbffr