Trainee Information Security Analyst - Cumberland Building Society : Job Details

Working at the Cumberland, you become part of something special. We’re a Mutual organisation, committed to improving the lives of our colleagues, customers, and community. Our values are incredibly important to us.

We’re on an exciting transformational journey with our people firmly at the forefront of our plans. If you want to work for a team integral in helping to drive cultural change, a team where you can bring your whole self to work bringing your energy and creativity to make a positive difference, then this is the job for you.

We have an exciting opportunity for a Trainee Information Security Analyst to join our Technology team. In this role you'll develop skills to assist our Senior Information/Cyber Security Analysts to monitor implementation of all aspects of Information and Cyber Security against threats such as security breaches, computer viruses or cyber-attacks.

You’ll assist in developing, understanding, and applying security monitoring protocols and procedures, incident management, vulnerability management and carry out non-complex service desk tasks related to information security operations.

The Benefits

• Salary - up to £33,000 p.a. - depending on skills and experience.
• Holidays - 25 days holiday plus public holidays and the opportunity to buy and sell up to 3 days.
• Learning and Development opportunities - We want you to grow in your role. We’ll work together to support your personal and professional development.
• Hybrid Working - the tools and equipment you need to be able to work from home when you need to, depending on your role.
• Health and Wellbeing - a calendar of events and activities throughout the year, Mental Health & Wellbeing champions, and Cycle to Work scheme.
• Community Day - We offer our people an extra paid day off every year to help local charities and community organisations.

The role

You’ll work closely with all areas of the business, including key stakeholders and departments such as Technology, Risk, Audit, Legal and Business Change. You’ll build key relationships with all teams and colleagues within Technology and will have the ability to utilise the skills and proficiencies each of the teams can offer.

• Assist the Senior and information/cyber security analysts in dealing with queries.
• Assist in managing selected security solutions including designing, configuring, implementing, maintaining and support.
• Support and execute all basic Information Security Operation tasks, initiatives and assignments.
• Assist in the evaluation and test security software and services with proposed enhancements as required.
• Identify risks and ensure these are presented in accordance with procedures and are given the appropriate level of attention.
• Assist in identifying and deploying security technology Society wide.
• Understand and support processes and relationships aligned with CBS Managed Security Operations Centre (SOC).
• Understand and build knowledge to support in the management of patching, vulnerability analysis and penetration testing to ensure SLAs are maintained or improved, recommendations are risk assessed and implemented in a timely manner.
• Build knowledge and conduct technical vulnerability assessments of IT systems and processes, identifying potential vulnerabilities, to make recommendations to the Information/Cyber Security Operations Manager to control any risks identified and to ensure they are implemented
• Understand and build knowledge to assist with Information Security incidents, to remediate any tasks and investigate and document the root cause analysis.
• Work closely with key stakeholders including Risk, Audit, Technology and Information Security Assurance to assist and provide input to ensure that Society policies and procedures for Information/Cyber Security Operations are effective and adhered to.
• Assist with the delivery of the Information/Cyber Incident Security plan including the execution of regular Cyber Incident scenario testing exercises.
• Keep up to date with security trends, threats and control measures.
• Assist in producing timely and accurate Information/Cyber Security Operations reports, returns and audits in line with timescales dictated by key stakeholders / departments.

About you

We’re looking for someone with a clear desire and willingness to undertake qualifications and learn the skills required to carry out the role. Previously working in a Financial Services led environment or equivalent highly regulated industry would be advantageous.

• Excellent interpersonal, written and verbal communication skills and the ability to work well with others.
• Be organised and can work under pressure.
• Attention to detail and develop skills to ensure accurate assessment and management of risk.
• Demonstrate analytical skillset.
• Ability to effectively prioritise situations requiring urgent attention.
• Ability to work as a team and on own initiative to think 'outside of the box’ and go the extra mile.
• Pro-activity and self-motivated with the proven ability to drive results and provide excellent customer services to all levels of the organisation.
• High level of motivation to see success delivered through own personal efforts and those around them.
• Ability to demonstrate and enhance the core values of the Society.