Senior Cybersecurity Analyst

Shape the Future with the National Wealth Fund

At the National Wealth Fund, our mission is to swiftly and effectively mobilise trusted sector insights and investment expertise to unlock billions in private finance for projects across the United Kingdom. Providing £27.8bn of capital and an expanded mandate, we are ready to help the market invest with confidence, continue to drive forward the Government's growth ambitions.

We are looking for skilled and results oriented individuals who are motivated to help us build the National Wealth Fund into an industry-leading institution.

Job Purpose

The Senior IT Security Analyst will play a crucial role in ensuring the safety and security of the National Wealth Fund's (NWF) IT estate, which is primarily based on Microsoft technologies. The ideal candidate will have strong, demonstrable experience in delivering and managing Identity Management and Governance, Microsoft Purview technologies, and the broader Microsoft Entra technology suite.

This role involves working closely with the Head of Information Security and other stakeholders at all levels to deliver a secure environment and protect our data. The Senior IT Security Analyst will have primary responsibility for implementing and continual improvements to Identity Governance and Data Loss Prevention controls, as well as mitigating cyber risks, responding to security incidents, and processing business-as-usual (BAU) security functions as part of a small team.

Core Accountabilities Of The Role

• Microsoft Purview Technologies: Design, deliver, and manage end-to-end Microsoft Purview Technologies and Controls, to enhance data security, governance and compliance across the organisation.
• Identity Management: Lead on and manage Identity Governance processes and tooling within the Joiner-Movers-Leavers lifecycle and RBAC
• Microsoft Security Tools: As part of the Information Security Team, manage the broad Security and Compliance toolset contributing to improvements and remediations where necessary.
• Risk Assessment: Identify and mitigate vulnerabilities and threats to the organisation’s information systems, and manage risks accordingly
• Incident Response: Coordinate and manage the response to security incidents, including investigation and reporting.
• Compliance: Proactively working with the key stakeholders in Compliance and Risk to ensure compliance with relevant laws, regulations, and standards related to information security. Contribute to the development of security policies and procedures. Provide support during audit when required.
• Training and Awareness: Development and delivery of security awareness training for employees to promote a culture of security within the organization.
• Collaboration: Develop and maintain relationships with Key Stakeholders across the organisations and 3rd parties to promote best practice in relation to cyber security and provide process improvement recommendations.
• Reporting: Prepare and present reports and insights on the status of information security risks and incidents to senior management, proposing recommendations where necessary.
• BAU Security Functions: Process BAU security functions as required including providing advice and guidance to colleagues and helping increase general security awareness.
• Maintain up-to-date knowledge of emerging cyber security threats and best ways to manage them.
  
  

Essential Experience

Knowledge, Skill and Experience requirements

• Demonstrable experience of Information Security, Data Loss Prevention, the associated tools, and Information Security Risk Management.
• Proven experience in a Security Analyst role within an estate which utilises Microsoft technologies such as Entra (AD), M365 and Azure.
• Demonstrable experience in delivering and managing Identity Management and Role Based Access Controls, ideally with Microsoft Entra ID Governance, or similar, such as Okta.
• Demonstrable experience of Microsoft Purview Technologies, around DLP and Compliance
• Demonstrable experience of working with senior stakeholders in the organisation
• Experience of key industry frameworks such as Cyber Essentials Plus, NIST, ISO.
• Ability to work in a team, with minimal supervision and prioritise own work effectively.
• Understanding and awareness of Data Protection responsibilities and practice.
  
  

Desirable Experience

• Good understanding of key regulatory regimes (including GDPR).
• Good facilitation experience.
• Experience working with multiple IT managed service providers.
• Information Security and Risk experience gathered within financial services.
  
  

Skills

• Strong communication, engagement and influencing skills.
• Excellent attention to detail.
• Ability to effectively represent NWF through building collaborative relationships.
• Self-motivated, and well organised with initiative and comfortable with continuous improvement working to agreed objectives, targets and timescales.
• Experience of managing a diverse set of internal and external stakeholder relationships.
  
  

The closing date for applications is Thursday 3rd July.

A career with us offers a unique opportunity to make a lasting impact and work on cutting-edge technologies that will drive the UK’s future. We value diversity in our people and inclusion is at the heart of what we do.

We offer competitive benefits and unique learning opportunities from combining both private and public sector skills and experience. Please note, referencing and background checks are carried out for all roles here at the National Wealth Fund.