Senior Security Analyst

You will join the Cyber Engagement team, which is a function within Cyber Security team to enrich and streamline the communication between Business and Cyber Teams to meet the group's strategic requirements. 

The role is to improve efficiency between the LSEG business teams and the Cyber Security functions by devising and implementing automation, process, procedures and reporting that improve how the business engages with Cyber Security. You will build up a knowledge of the group cyber security services (Penetration Testing, Application Security, Security Architecture, Vulnerability Management, Cloud Security, etc) and help group business teams in engaging and onboarding to the right service at the right stage of their service/application development.  

WHAT YOU'LL BE DOING

• Initiate, develop and manage strong partnerships with Cyber Security service teams (Penetration Testing, Application Security, Security Architecture, Vulnerability Management, Cloud Security, etc). 

• Initiate, develop and manage strong partnerships with relevant stakeholders in Business Divisions (D&A, Capital Market, Post Trade) 

• Perform initial triage of requests coming from business teams to engage with cyber security services to check applicability to onboarding criteria, align delivery timeline with SME teams and ensure the right forms, tools and processes are being used. 

• Help in developing, maintaining and automating the Cyber Engagement tools and services (Pre-engagement Cyber Assessment, Pre-Go Live Checks, Cyber Posture Views/Insights) based on Cyber Security services teams’ standards and Business teams' feedback. 

• Supervise and perform early assessments using the Pre-engagement Cyber Assessment process to identify key security controls requirements for new projects.   

• Supervise and perform Pre-Go Live Checks to ensure projects have implemented their prescribed security controls. 

• Provide Business teams with Security Posture Views of their critical assets, and with insights to help them make informed decisions to prioritize cyber security activities.  

• Stakeholder management to support the LSEG / Microsoft partnership. Sharing risks, issues and general progress.

• Coordinate reports and analysis produced by Cyber teams, offering accurate guidance where necessary and ensuring alignment to applicable Cyber Security control frameworks and polices. 

• Create and maintain automation which improves efficiency and drives excellence. 

WHAT YOU'LL BRING

• Understanding of Cyber Security services along with strong business facing skills. 

• Excellent verbal and written communication skills, with ability to communicate technical concepts to non-technical audiences. 

• Experience with devising and implementing processes that supports the business. 

• Ability to handle critical request according to predefined RACI matrix. 

• Developing and applying technical knowledge and standard processes to support business needs. 

• Understanding of enterprise-scale Security management processes and the latest security principles, techniques, and protocols.

BUSINESS AND SECTOR EXPERTISE

• Exposure to aspects of the financial technology services industry in a global environment 

• Background working in a regulated industry or environment. 

PEOPLE EXPERIENCE

• Must collaborate in a team environment and possess good interpersonal communication skills. 

• Highly adaptable and able to approach challenges differently, to achieve goals. 

• Interacts well with others, quickly establishing rapport building positive relationships and networks. 

DESIRABLE SKILLS 

• Experience maintaining and creating automation using Microsoft Power Automate, JIRA and Azure Dev Ops. 

• Understanding of Microsoft Power Apps and how to maintain / create new applications that assist with business requirements. 

• Understanding of programming languages e.g. Python, Typescript, Powershell, Batch Scripts to help with automation capabilities. 

• Knowledge of Cyber Security Services e.g. Penetration Testing, SAST, SCA, Perimeter scanning, Infrastructure Scans, End Point Security, Cloud Security etc. 

• Suitable qualifications such as CISSP, CISM, CRISC or MSc in Information Security.  

• We maximize each employee’s potential through personal development and through a wide range of learning tools both formal and informal.  

• We remunerate our people with competitive salaries and offer a range of attractive benefits.  

• We also recognize that to attract the best talent, we need to be flexible, and we are open to discussing hybrid work arrangements with you.