Cyber Security Analyst, Numan

• Previously driven organisational change and delivered measurable impact, with a strong track record of promoting and embedding cybersecurity practices across the organisation
• A solid understanding of cybersecurity principles and how to relate technical risks to broader business risks
• Led the implementation and maintained frameworks such as ISO27001
• A familiarity with cyber risk management, including the evaluation of third-party risks
• Experience with or exposure to security awareness programmes and tools
• An understanding of incident response processes and handling security alerts
• Excellent attention to detail and a proactive approach to learning and development
• Strong communication and stakeholder engagement skills
• An interest in technology, regulation, and improving security posture
• A commitment to continuous learning and professional development, demonstrated through courses, certifications, and conference participation

Desirable

• As a Cyber Security Analyst, you will join Numan’s expanding Cyber Security team
• You'll play a crucial role in safeguarding our systems, data, and users from evolving cyber threats, contributing to a secure and resilient digital environment
• Working alongside experienced colleagues, you will help shape and enhance our security approach, making a tangible impact as we grow
• Our work is based on recognised frameworks such as ISO27001 and the NIST Cybersecurity Framework (CSF), but we continually adapt to stay ahead
• Supporting the implementation and upkeep of ISO27001-aligned policies and procedures
• Maintaining and developing the cyber risk register by identifying, assessing, and helping to mitigate risks
• Leading on the creation and delivery of security awareness training across the organisation using our awareness platform
• Responding to security alerts and incidents in collaboration with relevant teams
• Contributing to the ongoing improvement of Numan’s security posture through close collaboration with IT, Governance & Risk, Privacy, and Engineering teams
• Supporting configuration and monitoring of Google Workspace security, including data loss prevention (DLP)
• Managing aspects of the third-party risk process within procurement