Starling Bank

The Information Security Risk Analyst role sits within the Risk Department in the second line of defence. The Risk Department is responsible for developing the risk management framework for the business, challenging activities and reports from the first line and monitoring and reporting on risks and controls to the relevant committees, ensuring that the first line continues to operate within the risk appetite and tolerances that have been set.Role purpose<ul> <li>The Information Security Risk Analyst will support and report directly into the Head of Information Security Risk but will have exposure across the Bank to the management of Starling’s information security risks.</li> <li>The role holder will perform assurance of the information security and resilience of Starling Bank, our technology, people and processes</li> </ul>RequirementsKey responsibilities<ul> <li>Provide technical oversight of information security, ensuring risks are identified, managed and escalated appropriately.</li> <li>Assure the resilience and security of Starling Bank’s technology operation by all techniques from inspection, interview to direct testing and scripted checks.</li> <li>Provide sound evaluation of issues, incidents and vulnerabilities and experienced technology opinion to the risk department as a whole.</li> <li>Challenge potential flaws or vulnerabilities in process, architecture or code, both directly with first line staff and indirectly via review process.</li> <li>Work with first line to improve controls and risk management in-line with strategic objectives, regulatory requirements and evolving threat landscape.</li> <li>Establish strong relationships with our engineers, security team, and leadership.</li> </ul>Behaviours and CompetenciesYou will have the ability to apply a risk-based approach to challenge the first line across security domains, and have practical expertise in several of the following areas:<ul> <li>Awareness of the technology-related risks a bank may face. Ideally including hands-on experience of technology in a fintech or a tech-focused organisation.</li> <li>Experience of managing the regulatory and compliance challenges in financial services or another heavily regulated sector.</li> <li>Security in a cloud environment (AWS, GCP), working with containerisation, microservices, serverless and infrastructure-as-code.</li> <li>Ability to determine how to test hypotheses and make sensible cost and benefit trade-offs in determining what tests and resulting changes are warranted.</li> <li>Engaging directly with engineers, reviewing and testing source code and performing manual or automated application security testing effectively as part of CICD pipelines.</li> <li>Programming skills including but not limited to Java, Python, SQL, Kotlin and Swift.</li> <li>Security logging, monitoring and alerting, including configuration and review of detection rules.</li> <li>Ability to understand and evaluate findings from penetration testing, bug bounties, responsible disclosure programmes from an assurance perspective.</li> <li>Familiarity with vulnerability and configuration scanning tools, and auditing patch management.</li> </ul><ul> <li>Good interpersonal skills with ability to challenge in a positive manner and handle difficult situations. </li> <li>Be self motivated, enjoy problem solving and want to continue to learn and develop.</li> </ul>Benefits<ul> <li>33 days holiday (including public hols). You’ll also get your birthday on us</li> <li>16 hours paid volunteering time a year</li> <li>Family friendly leave policies</li> <li>Private Medical Insurance with VitalityHealth</li> <li>We have many varied social groups set up and run by our employees - ForTheWin (a gaming group), Starling FC, book club and many more!</li> <li>Discounts on cinema tickets, restaurants, shopping and train tickets via a Perkbox membership</li> <li>Access to ‘salary sacrifice’ benefits such as Cycle to Work scheme</li> <li>Gym membership options</li> <li>Season ticket travel options</li> <li>Full details are available on our careers site</li> </ul>About us:We are a leading digital bank on a mission to disrupt the banking industry. We’ve built an app with smart money management tools to help our customers live a healthier financial life. We also offer groundbreaking B2B banking and payments services.Since our launch in 2014, we’ve opened almost three million accounts including 480,000 business accounts for small and medium-sized enterprises (SMEs).We’re a fully licensed UK bank and we have the culture and spirit of a fast-moving, disruptive technology company. We’ve been voted Best Current Account for the last five years running, named Which? Banking Provider of the Year for the last two and we were the most switched to bank in 2021. We employ more than 1,800 people across our London, Southampton and Cardiff offices.Starling Bank is an equal opportunity employer, and we’re proud of our ongoing efforts to foster diversity &amp; inclusion in the workplace. Individuals seeking employment at Starling Bank are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law.By submitting your application, you agree that Starling Bank may collect your personal data for recruiting and related purposes. Our Privacy Notice explains what personal information we may process, where we may process your personal information, its purposes for processing your personal information, and the rights you can exercise over our use of your personal information.

Southampton

Information Security Risk Analyst

Everyone at Starling gets the chance to own interesting things from day one, and we’re told one of the best things about working here is the ability to achieve a lot in a short space of time.To support our growth, we are looking for SOC Analysts to join our growing cyber security function. This role will be supporting our 24/7 operational capabilities.As a member of the Starling SOC team, you will be working with the industries brightest SecOps professionals to protect Starling customers, assets, and systems using the latest technologies.Role Overview:<ul> <li>Incident Triage, Response, and Investigations based on Alerts received from multiple sources which include:<ul> <li>Cloud Infrastructure/Security.</li> <li>Endpoint Detection and Response.</li> <li>Perimeter detection tooling.</li> </ul> </li> <li>Investigating and responding to security alerts raised by Users.</li> <li>Enhancing and creating analytic triggers to enhance alert efficacy.</li> <li>Continuous development of incident handling and readiness processes.</li> <li>Proactive threat hunting based on threat intelligence.</li> <li>Documentation of incidents and investigations.</li> </ul>RequirementsWe’re open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. Below is an overview of the skills that will be used:<ul> <li>Understanding of AWS Security Solutions.</li> <li>Experience working and supporting analytics/SIEM platforms.</li> <li>Experience working in CSIRT/SOC functions.</li> <li>Experience supporting Incident Response engagements.</li> <li>Experience in endpoint based investigations.</li> </ul> <ul> <li>Interest in Automation.</li> <li>Interest in Threat Intelligence and Analytic Tuning.</li> <li>A high level understanding of mobile, network and operating system security controls.</li> </ul><ul> <li>Any experience of programming in Python, Go and/or Java.</li> <li>A Cyber/Information Security related degree and/or relevant cyber security qualification(s).</li> </ul>BenefitsWe are a leading digital bank on a mission to disrupt the banking industry. We’ve built an app with smart money management tools to help our customers live a healthier financial life. We also offer groundbreaking B2B banking and payments services.Since our launch in 2014, we’ve opened almost three million accounts including 480,000 business accounts for small and medium-sized enterprises (SMEs).We’re a fully licensed UK bank and we have the culture and spirit of a fast-moving, disruptive technology company. We’ve been voted Best Current Account for the last five years running, named Which? Banking Provider of the Year for the last two and we were the most switched to bank in 2021. We employ more than 1,800 people across our London, Southampton and Cardiff offices.Starling technology works in a hybrid pattern both from home and one of our three offices. We’re open to applications from across the UK including fully remote, if you’re hybrid our preference is that you’re located within a commutable distance to either our London, Southampton or Cardiff office, so that we’re able to see each other and collaborate in person too.Benefits:<ul> <li>25 days holiday (plus public holidays)</li> <li>An extra day’s holiday for your birthday, taken a week on either side of the day</li> <li>16 hours paid volunteering time a year</li> <li>Part-time and/or flexible hours available for most roles</li> <li>Hybrid/remote working</li> <li>Private Medical Insurance with VitalityHealth including mental health support and cancer care. Partner benefits include discounts with Waitrose, Mr&amp;Mrs Smith and Peloton</li> <li>Generous family-friendly policies</li> <li>Enhanced sick pay</li> <li>Contributory pension scheme</li> <li>Varied social groups set up and run by our employees</li> <li>Perkbox membership giving access to retail discounts, a cashback scheme, a wellness platform for physical and mental health, a birthday box and weekly free coffee</li> <li>Access to ‘salary sacrifice’ benefits such as Cycle to Work scheme</li> </ul>Full details are available on our <a href="https://www.starlingbank.com/careers/engineering/" rel="noopener noreferrer nofollow ugc" target="_blank">careers</a> siteAbout Us:We are a leading digital bank on a mission to disrupt the banking industry. We’ve built an app with smart money management tools to help our customers live a healthier financial life. We also offer groundbreaking B2B banking and payments services.Since our launch in 2014, we’ve opened almost three million accounts including 480,000 business accounts for small and medium-sized enterprises (SMEs).We’re a fully licensed UK bank and we have the culture and spirit of a fast-moving, disruptive technology company. We’ve been voted Best Current Account for the last five years running, named Which? Banking Provider of the Year for the last two and we were the most switched to bank in 2021. We employ more than 1,800 people across our London, Southampton and Cardiff offices.Starling Bank is an equal opportunity employer, and we’re proud of our ongoing efforts to foster diversity &amp; inclusion in the workplace. Individuals seeking employment at Starling Bank are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law.By submitting your application, you agree that Starling Bank may collect your personal data for recruiting and related purposes. Our <a href="https://www.starlingbank.com/legal/privacy-notice/" rel="noopener noreferrer nofollow ugc" target="_blank">Privacy Notice</a> explains what personal information we may process, where we may process your personal information, its purposes for processing your personal information, and the rights you can exercise over our use of your personal information.

SOC Analyst

InfoSum

InfoSum is the world’s leading data collaboration platform. The world’s largest enterprise businesses use InfoSum to collaborate across data sources and deliver richer customer experiences that prioritize consumer privacy. Our vision is to unlock data’s limitless potential, by enabling the world’s data to be connected but never shared. Off the back of our Series B funding of $65 million in 2021, we are investing in our people and teams. As a people-first organization, we can offer you the personal and professional flexibility needed to get the job done, to grow with us, and help challenge the status quo. If you want to work with a business that encourages collaboration, champions the idea that the sum is greater than its parts, then we want to hear from you.We are looking to bring in and support the growth of a Junior Security Analyst to work within our dedicated security operations team. The successful candidate will help to monitor, analyse and respond to threats and in return we will provide you with industry training and help establish your presence in our Sec Ops team. Responsibilities:<ul> <li>Monitoring of the SIEM and initial triage of alerts Auditing tasks (daily crawl of audit logs for anomalies).</li> <li>Policy enforcement spot checks (checking firewall rules and cloud inventory).</li> <li>Assist the wider Sec Ops team with stakeholder duties, automation and incident response.</li> <li>To provide real time threat analysis and detection.</li> <li>Respond to system generated alerts, analyse logs and traffic patterns.</li> <li>Provide analysis and trending of security log data and network traffic from many monitoring points.</li> <li>Generate customer facing security reports.</li> <li>Integrate and share information with other analysts and other teams.</li> </ul>Requirements<ul> <li>Good level of knowledge in IT and networking fundamentals across: Operating Systems, Cloud vendors, IP, TCP/IP, HTTP(S) .</li> <li>Knowledge of the security threat landscape and the approach threat actors take to attacking a network (phishing, port scanning, web application attacks).</li> <li>Knowledge of various security methodologies and technical security solutions (firewall and intrusion detection systems).</li> <li>Knowledge of network analysis and network/security applications.</li> <li>Desirable: Some experience as a Security/Network Administrator or equivalent in a Security Operations Centre environment .</li> <li>Desirable: Bachelor’s degree in a related field or equivalent experience and knowledge.</li> <li>Desirable: Experience working with SIEM systems.</li> </ul>Personal capabilities:<ul> <li>A passion for Cyber Security and enjoys solving problems</li> <li>Ability to multitask, prioritise and manage time effectively</li> <li>Ability to cope successfully under pressure and with shifting priorities</li> <li>Strong attention to detail</li> <li>Excellent interpersonal skills </li> <li>Excellent verbal and written communication skil</li> </ul>BenefitsYou will receive a competitive salary, 8% pension contribution, private health care and the opportunity to receive share options. We have a fantastic office in Basingstoke complete with a fully stocked fridge, catered lunch and snacks. However, like most tech businesses, we are fully remote and intend to remain that way until social distancing measures are over in the UK. When we return to the office, we will take the best bits of remote working but also foster face to face collaboration, with the intention that all employees will be in the office at least twice per week. Of course, if you prefer to be office based, you will be able to work there full time.

Basingstoke

Junior Security Analyst

Bottomline Technologies

Bottomline is at the forefront of digital transformation.  We are a growing global market leader uniquely equipped to address the changing needs of how businesses pay and get paid.  Our culture of working with and for each other enables us to delight our customers.  We empower our teams to think like owners driving customer delight, helping them grow their business and win in their markets.
As a SWIFT Security Analyst, you'll play a key role in supporting multiple product teams to continuously improve our strong IT Security &amp; Compliance posture. Our clients operate in heavily regulated industries, and our goal is to meet or exceed their requirements. In collaboration with team members, you will be expected to provide support and guidance that helps Bottomline to win new customers and delight those already on-board.
This position can be based out of a REMOTE location within the US, East Coast preferred 
How you’ll contribute
<ul>
<li>Supporting audits and security assessments throughout the year by liaising with Auditors and SMEs, collating and presenting evidence to satisfy requirements</li>
<li>Assessing ad hoc Security and Compliance requests, then working with our teams of experts to provide accurate and timely responses to customers and prospects</li>
<li>Work collaboratively with teams to ensure governance or compliance improvements are implemented in a timely manner, leveraging best practice wherever possible</li>
<li>Maintain a regular cadence with teams to keep documents and artefacts updated</li>
<li>Assist the Data Protection Officer responding to individual and regulatory requests</li>
<li>Support the management and implementation of our Sanctions Compliance program</li>
<li>Prepare reports and presentations to share information with key stakeholders</li>
<li>Contribute to tactical planning and continuous improvements in Governance, Risk and Compliance procedures, bringing your own experience and enthusiasm to bear</li>
<li>Manage a complex; fast-paced environment with tight priorities</li>
<li>Commit to excellence in serving customers</li>
<li>Work across boundaries as part of a bigger team to deliver results</li>
</ul>
What will make you successful:
<ul>
<li>Bachelor's degree in Information Systems, Computer Science, or other related field from an accredited college or university, or equivalent</li>
<li>2-5 years’ Practical experience with SWIFT Security and Compliance is essential</li>
<li>Professional certifications in a relevant field would be an advantage</li>
<li>Previous experience working in 2nd / 3rd line IT Compliance role an advantage</li>
<li>Good working knowledge of common compliance frameworks (NIST, ISO, etc.)</li>
<li>Knowledge of common operating systems, infrastructure, and coding practices</li>
<li>Knowledge of prominent data protection legislation, such as CCPA and GDPR</li>
<li>Strong interpersonal skills</li>
<li>Bring curiosity, creativity and critical thinking to your work</li>
<li>Positive and optimistic attitude</li>
</ul>
Passion for identifying improvements through simplification and consistency. You’ll love Bottomline because in everything we do we seek to delight our customers and we are passionate about building a company of which we can all be proud, and this starts with building amazing teams filled with team members that challenge you every day.
#LifeatBottomline
#LI-DNI

Portsmouth

SWIFT Security Analyst - Remote

Bottomline is at the forefront of digital transformation.  We are a growing global market leader uniquely equipped to address the changing needs of how businesses pay and get paid.  Our culture of working with and for each other enables us to delight our customers.  We empower our teams to think like owners driving customer delight, helping them grow their business and win in their markets
The Senior Security Audit Analyst is responsible for monitoring IT systems to ensure they follow policies and practices. They must evaluate technology, identify controls, and keep throughout records. In addition to monitoring IT systems, the Senior Security Audit Analyst shall implement policies and day-to-day functions related to cybersecurity, business continuity, disaster recovery management, compliance management/internal controls, risk management, ethics management, internal and external audits.  Compliance with industry mandated standards and controls (e.g. FFIEC, ISO27001, GDPR/CCPA, PCI, etc.). Additionally, they shall act as mentors to IT staff teams to ensure they have a solid understanding of procedures and necessary independence to conduct their own investigations, and are effective planners, communicators, and teachers.
The Senior Security Audit Analyst must retain authority, encourage problem solving, and promote a constructive work environment. They must be able to direct risk functions while understanding the risks and governance associated with current and emerging technologies. The Bottomline IT Risk Analyst shall compile a vast array of data into coherent reports for the CFO, CIO, GC, CISO and Sr. Director of Audit, Risk and Compliance.
This position can be based out of a remote location in the United States
How you’ll contribute:
<ul>
<li>Participate in the development of the annual IT Risk &amp; Governance design</li>
<li>Develop and implement internal policies and procedure documents to support IT compliance initiatives</li>
<li>Analyze the IT environment to evaluate application and infrastructure risks and controls</li>
<li>Coordinate, execute and manage the assessment and reporting phases for multiple concurrent IT Risk and Third Party Assessments</li>
<li>Design, review and approve tests that identify IT Risks, and provide strategic recommendations to enhance business operations</li>
<li>Present risks to senior management and negotiate suggested action plans</li>
<li>Promote a risk-aware culture; ensure efficient and effective risk and compliance management practices by adhering to required standards and practices</li>
<li>Mentor teams to develop skills and expertise with the IT risk process, technology, and client management</li>
<li>Participate in a primary capacity in supporting compliance, and regulatory activities, including, but not limited to: PCI, SSAE16, Regulatory, Sarbanes-Oxley (SOX 404), ISO27001/9001</li>
<li>Manage the ongoing effectiveness of information security controls (automated, manual, and needing development), working with a variety of control owners within the Information; Security and Technology organizations, and evaluating control design and standards in a variety of program areas</li>
<li>Advise senior and executive management on the status of technology risk and compliance controls based on assessment results and information from various monitoring and control systems</li>
<li>Support business initiatives with respect to resilience and Disaster Recovery &amp; BIA</li>
<li>Conduct research and make recommendations on products, services, protocols and standards in support of procurement and development efforts</li>
<li>Develop, implement and maintain change control and testing processes for service, application and infrastructure modifications</li>
<li>Establish appropriate end-user access controls, best practices and perform transaction and security assessments</li>
<li>Maintain up-to-date knowledge of the FinTech and Payments Industry and IT developments</li>
<li>Build and maintain strong internal relationships by demonstrating detailed knowledge of the client’s business environment</li>
<li>Maintain and increase personal knowledge of the Bottomline solutions and services to enable the better execution of the role</li>
<li>Deliver staff training and education in the areas of security, BCP, DR and best practice.</li>
<li>Participation in special projects or other duties as required</li>
</ul>
What will make you successful:
Strong understanding and knowledge of business risks and governance related to general system controls, system/applications development, change management, logical access security, local area network and wide area network concepts, contingency and recovery:
<ul>
<li>5+ years of experience in risk, governance and compliance information technology organization</li>
<li>Relevant, industry recognized security certification such as CISSP, CGEIT, CRISC, CISM, CSX PCI SA, PMP, CISM, CPP, CPA and CBCP</li>
<li>BA, BS or MBA Degree</li>
<li>Understanding of data management concepts</li>
<li>Knowledge of FFIEC, SSAE18, ISO27001/2, BCP/DR, NIST and COBIT relevant frameworks</li>
<li>Strong understanding of current regulatory expectations for financial services organizations</li>
<li>Excellent analytic, oral and written communication skills</li>
<li>Network &amp; Infrastructure Architecture network segmentation concepts, firewalls, routers, VPN solutions etc</li>
<li>Systems Development (including SDLC, project management, BCP/DR and change control methodologies</li>
<li>Infrastructure and Application Security Testing comprehension to understand risks associated with vulnerabilities</li>
<li>Physical Security &amp; Data Center Environmental Controls</li>
<li>Knowledge of Hosted and Windows environments, Client Server Technology, Networks,</li>
<li>Experience using GRC applications</li>
<li>CISSP, CGEIT, CRISC, CISM, CSX PCI SA, PMP, CISM, CPP, CPA and CBCP or other relevant certification preferred</li>
<li>Excellent project management skills</li>
<li>High attention to detail necessary to manage, analyze and finalize artifacts and documents</li>
<li>Familiarity with infrastructure, networking, security and software development processes</li>
<li>Organized, responsive, and able to manage multiple initiatives and tasks in parallel</li>
</ul>
You’ll love Botttomline because in everything we do we seek to delight our customers and we are passionate about building a company of which we can all be proud, and this starts with building amazing teams filled with team members that challenge you every day.
Start your #LifeAtBottomline
#LI-DNI

Senior Security Audit Analyst - Remote

Apply to Cyber Security Jobs in Hampshire in companies remotely and near you. New Cyber Security Jobs in Hampshire added daily.

Job Position and Company	Location	Tags	Posted
Information Security Risk Analyst at Starling Bank	Full Time Analyst Application Security
SOC Analyst at Starling Bank	Remote Full Time Soc Analyst Analyst Incident Response
Junior Security Analyst at InfoSum	Auditing Automation Firewall Incident Response Intrusion Detection
SWIFT Security Analyst - Remote at Bottomline Technologies	Audits CCPA GDPR Golangvernance NIST
Senior Security Audit Analyst - Remote at Bottomline Technologies	Application Security Audits CCPA CISM Cissp

Cyber Security Jobs in Hampshire

0 Cyber Security Jobs in Hampshire. Page 1 of 1

5 closed cyber security jobs in hampshire:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Hampshire

0 Cyber Security Jobs in Hampshire. Page 1 of 1

5 closed cyber security jobs in hampshire:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter