Total 486 Full-time analyst job vacancies in Legal / Public / Security category in The United States of America

23rd April, 2024
CyberCX is Australias leading independent cyber security consultancy organisation. To support our rapid growth, we are looking motivated and passionate Security Analysts to work in our Brisbane office. In this role, youll work with your team to deliver great client outcomes and grow your career rapidly as a cyber security professional.  Were looking for candidates that have a sound and relevant technical background. You dont need extensive experience in security, but a passion to learn, a great attitude, and a keen interest in security is essential. You will receive formal and on the job training that will help you grow your career in the cyber security field.   Key responsibilities:    

Technical analysis of alerts and data from security products including (but not limited to) SIEMs, Intrusion detection and prevention systems, end point security solutions, web proxies and network security devices, and vulnerability scanning and management systems 


... Click here to view more detail / apply for Security Analyst

Responsibilities：

• Support security developments (such as evolving threats, new or enhanced security controls or changes to the technical infrastructure)
• Ensure that all Infrastructure related procedures, operation guide, architecture diagram, hardening baselines, security metrics, etc documents shall be reviewed annually or updated whenever there are changes within a month.
• Be responsible for strengthening Customer’s cyber security posture against cyber threats through vulnerability management, incident response and analysis, threat hunting and security operations.
• Manage Customer’s Cyber security operation and manage the reporting and handling of cyber security incidents.
• Perform Vulnerability Management leveraging on MVMS.
• Perform daily checks on the Endpoint Detection Response/Database Activity Monitoring dashboard for any abnormalities.
• On boarding of subscribed servers and infrastructure devices to MVMS.
• Provide supporting documents for audits
• Perform Monthly Vulnerability Assessment, Quarterly Vulnerability Assessment for servers and network equipment.
• Work with application and infrastructure team to to ensure compliance and regulatory requirements and industry standards

Requirements;

• Diploma/degree in computer studies
• 2 years of experience working in a security operations, incident response, vulnerability management or related field.
• Demonstrated experience in network security, server security, endpoint security, web security etc.
• Strong knowledge of security principles, technologies, and industry best practices.
• Experience with log analysis, malware analysis, and network traffic analysis.
• Excellent analytical and problem-solving skills, with the ability to quickly identify and respond to security incidents, analyze complex security issues and develop effective solutions.
• Hands-on experience in security appliances such as IBM Guardium, MMVS, Carbon Black, Cyber Ark is a definite advantage.
• Experience in IT security/support operations with willingness to learn above mentioned tools are encouraged to apply. Experienced candidates will be considered for team lead role
• Willing to work in rotational shift environment (including weekends and night shift).

NCS is the leading technology services firm that operates across the Asia Pacific region in over 20 countries, providing consulting, digital services, technology solutions, and more.

We believe in harnessing the power of technology to achieve extraordinary things, creating lasting value and impact for our communities, partners, and people. Our diverse workforce of 12,000 has delivered large-scale, mission-critical, and multi-platform projects for governments and enterprises in Singapore and the APAC region.

We’re searching for a Security Analyst (Threat Hunter) to be part of our diverse team of talent here at NCS!

If you believe in going above and beyond, embodying excellence, and bringing people and technology together like never before, we would love to have a conversation with you!

What we seek to accomplish together!

• Proactively 'hunt' for potential malicious activity and incidents across the environment using advanced threat network and host-based tools adopting Mitre Attack Framework.
• Perform hunting for malicious activity across the network, endpoint, and Critical Assets.
• Create hunting hypothesis and perform IOCs & TTPs based threat hunting and share reports with the management weekly on the findings, misconfiguration, use case development and provide suggestions for counter measurement.
• Expertise in hunting, managing, and writing detections using logs from Endpoint Detect and Response solutions like Carbon Black EDR, CrowdStrike EDR & Cortex XDR etc.
• Research on different TTP's for ATP Threat groups which are used by attackers during the sophisticated Cyber-attacks.
• Collaborates with technical and threat intelligence team to provide indications and warnings and contributes to predictive analysis of malicious activity.
• Perform cyber security threat hunting & detection activities with specific focus on countermeasure Tactics, Techniques and Procedures (TTPs)
• Contribute to the tuning and development of security information and event monitoring systems (SIEM) use cases and other security control configurations to enhance threat detection capabilities.
• Familiarity with threat modelling, development of attack plans, performing manual & automated Ethical Hacking, & develop proof of concept exploits.
• Evaluates new security technologies and products and performs engineer-level work and analysis to determine if solutions should be pursued.

The Ideal Candidate should ...

• Contribute to securing the organization by enhancing technologies and processes.
• Evaluate security controls against standards, policies, and best practices.
• Improve technology management and perform regular security assessments.
• Build relationships with project and operational teams as needed.
• Exhibit strong technical skills and the capacity to learn new technologies.
• Understand security principles and key technologies, with a focus on sustainable solutions and risk mitigation.
• Analyze sophisticated threats, leveraging knowledge of the threat landscape and cybersecurity fundamentals.
• Utilize forensic analysis and incident response tools to identify and assess threats.
• Have experience in threat hunting, incident response, and familiarity with programming languages like Python and SQL, as well as reverse engineering skills.
• Communicate effectively with diverse groups, reporting key metrics and statuses promptly.
• Possess 2 years and more of highly relevant threat hunting experience.
• Have professional certifications such as GIAC Certified Incident Handler Certification (GCIH) or equivalent

About NCS Group

We aspire to create the extraordinary and impact millions of people every day.

We believe in building a talent-led delivery model to enable our best people to lead, and to support them with the right structure, processes, and tools to ensure that our clients are delivered top quality services.

We want to invest in you!

Great work is never done alone, which is why we believe in fostering a collaborative work environment where people with different expertise and talent can come together.

We provide opportunities for our people to grow within our organization with clearly defined career tracks and specializations, ensuring that our talent and people can continuously deliver new value for our clients.

We’re here to make the extraordinary happen.

Find out more at ncs.co and our LinkedIn career site.

We handle all profiles with the highest level of confidentiality

• Responsible for setting up and configuring the WFM system according to our clients’ business needs. This includes setting up user roles, permissions, and access levels.
• Collaborate with OSC to manage user accounts, including adding and removing users, resetting passwords, and managing user permissions and access.
• Onboarding of new team members in Genesys systems
• Review and Process change request for making changes or creating new Pulse dashboards.
• Serve as internal support liaison for Genesys system upgrades and testing.
• Maintaining configuration for exceptions, time off, scheduled state groups, etc.
• Collaborating with CCTS to update VQ configurations for Pulse.
• Serve as the first line of technical support for any issues users may encounter.
• Continuously monitor and evaluate the effectiveness of the WFM system, suggest and implement improvements as needed. This could include introducing new features, streamlining processes, or enhancing user experience.
• Ensures that the use of the WFM system complies with all relevant policies, laws, and regulations. This may include data privacy regulations, labor laws, and internal company policies.
• Ensure the integrity of data within the system, including importing and exporting data, and setting up and managing integrations with other systems.
• Provide training and support to users, helping them understand how to use the system effectively.

 

This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office 2-3 set days a week (determined by leadership/site), with a general guidepost of being in the office 50% or more of the time based on business needs.

KEY ROLES AND RESPONSIBILITIES

• Ensure enhancement of SOC for cyber threats monitoring, detection, analysis and response through the use of threat intelligent and automation

• Project management and Vendors Management

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Synthesize multiple information sources and analysis reports into a holistic view of potential threats

• Conduct in-depth research into cyber security issues of industry- or nation-wide significance

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Develop a playbook for cyber incident management

• Perform the remediation and resolution of cyber incidents at the organizational level

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 3-5 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Advance Persistence Threat Solution

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Familiar with Kill Chain methodology, MITRE Att&ck, NIST Cybersecurity Framework, ISO 27001, 27002 and etc.

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

Responsibilities:

• Handling security incidents as reported by individuals and automated systems on laptops and mobile devices.

• Handling support of PC and Mac based users with security related problems.

• Monitoring compliance with IT Security policy and applicable law.

• Coordinating investigations and reporting of security incidents related to Network, Systems and applications.

• Coordinate and execute IT security projects for Arista at multiple locations.

• Engage in security research in keeping abreast of the latest security issues for Cloud enabled enterprises (including SAAS and IAAS).

• Monitoring system compliance with the IT framework for controls and levels of access; recommending improvements.

• Maintains access for business by providing information, resources, and technical support.

• Collaborate with other groups inside Arista to manage security vulnerabilities and help manage risks.

• Conduct and collaborate on laptop and server forensics as well as Cloud / Service Provider forensics with the global security team.

• Administer security-dedicated systems (Software, Firewall management, EDR, NDR, log collection, reporting , analytics, Cloud Security consoles) as appropriate.

• Perform other related duties as assigned. 

Qualifications: 

• BA or BSc. in Computer Science, Management Information Systems, Information Assurance or related field.

• Advanced degree desirable.

• Must have five+ years of progressive experience in computing and information security.

• Must have experience with networking technology, protocols.

• Expert knowledge is desired of laptop operating systems (MacOS, Windows and Linux).

• Previous experience working in a multinational corporate working environment is desirable.

• Proven experience in Cloud computing and SAAS platform security, including email security.

• Proven experience with DLP solutions is a plus.

• CISSP, GIAC or other security certifications desired. 

• Knowledge of information security standards (e.g., ISO 17799/27002, etc.), rules and regulations related to information security and data confidentiality (e.g., FERPA, HIPAA, etc.) and desktop, server, application, database, network security principles for risk identification and analysis. 

• This position requires some weekend and evening assignments as well as availability during off-hours for participation in scheduled and unscheduled activities.

A relevant degree within IT/IM or a related field
Professional certifications in Information security from industry standard frameworks (e.g. ISACA, BCS, CIPP, ITIL, Crest, ISC2, COPTIA)
Advanced knowledge of OT systems (ICS, SCADA), network architecture, network protocols, security best practices and response processes.
Familiarity with the ISA95/98 and Purdue models for industrial IT and the typical operating practices in that engineering environment
Understanding of operational risk posed by cyber physical environments
Working knowledge of ISA95, IEC 62443 and NIST SP 800-82r3.
Familiarity with firewalls, intrusion detection/prevention systems (IDS/IPS), and network monitoring tools
Working knowledge of automated malware analysis programs
Proficiency in securing various operating systems, including Windows, Linux, and macOS
Working knowledge of SIEM and other volumetric data systems
Knowledge of industry standard security products, including end point agents, remote capturing tools and other security related products
Ability to obtain and act on vulnerability information and conduct security risk assessments,
... Click here to view more detail / apply for OT Security Operations Analyst

Job Description:

•Support and maintain security tools including Endpoint Security, SIEM, IPS/IDS, Email Security, NGFW, DLP, Security Assessment.

•Administration of information security systems and devices, review audit logs and security alerts.

• Perform activities related to IT security, including installation, configuration changes, and updates/patches.

• To investigate, resolve or mitigate security incidents in a timely manner.

• To conduct internal vulnerability assessments and remediate identified vulnerabilities.

• To work with external vendor for penetration testing and remediate findings.

• To work with external MDR/SOC providers to detect and follow up on cyber security incidents.

• To work closely with DevOps and Developers to assess, identify and mitigate security vulnerabilities, and integrate security best practices into the software development lifecycle.

• Generation of metrics, reports, relevant information to support compliance status.

• Point of contact for ISO27001, liaise with auditors, perform self-assessment to ensure compliance with company policy and regulatory requirements.

• Develop and maintain information security awareness program.

• Maintain documentation of security system configurations, procedures, and troubleshooting steps.

Job Specifications :

• Diploma or Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field (or equivalent work experience).

• Relevant experience with security related solutions (Endpoint Security, VPN, Firewall, etc.) and handling of cyber security incidents and associated incident response tools.

• Strong knowledge of operating systems (e.g., Windows, Linux), network protocols, and server hardware.

• Understanding of security principles and best practices, including patch management and vulnerability assessment.

• Strong knowledge of malware families and network attack vectors.

• Good understanding of TCP/IP and internetworking technology including packet analysis, routing, and network security defenses.

• Minimum 2 years of related experience in cyber security or computer network defense role

• Strong understanding of MITRE ATT&CK Framework, NIST Cybersecurity Framework (CSF) and Kill Chain Methodology

• Relevant security-related certifications like CISSP, GCIH, GCIA, GCED, GCFA, CySA+ is a plus

• Good communication skills, with the ability to collaborate effectively with technical stakeholders.

• Strong attention to detail.

ABOUT US
Change your lifestyle and live and work in a vibrant community and great coastal environment.
Ballina Shire Council is situated on the Far North Coast of New South Wales, 20 minutes from Byron Bay and one hour from the Gold Coast. The shire is a popular tourism destination with pristine beaches, rainforest retreats and hinterland hideaways.
ABOUT THE ROLE
Position
We are seeking an appropriately experienced and passionate cyber security professional to join Council's dedicated Information Services team. Reporting to Council?s Coordinator Information Technology, this position will support the team in ongoing system evaluation, selection, development, implementation and maintenance to protect Council?s information assets.
Key focus areas of the position will be to maintain staff alertness around cyber risks and mitigation strategies, and to monitor processes and systems to ensure adherence and implement improvements to information security policies, standards


... Click here to view more detail / apply for Cyber Security Analyst

1. Responsibilities

· Strategic planning for IT security investments and technology adoption to maximize effectiveness of IT security controls against rapidly evolving threats.

· Develop and enhance the integrated Security Operations Centre (SOC) for advanced cyber threat monitoring and detection, early warning and active defence capabilities for both the Financial Sector and MAS as an institution.

· Work closely with internal and external stakeholders to manage the operations of the integrated SOC.

· Develop and implement cyber resilience frameworks, standard operating procedures and playbooks for cyber security operations and incident response.

· Ensure that cyber threats, risks and vulnerabilities are appropriately investigated and addressed promptly.

· Coordinate the investigations of cybersecurity incidents with internal teams and cross agency partners.

· Perform periodic management and third-party reporting.

· Work with partners to perform periodic rules tuning, streamline procedures and implement automation to improve efficiency and quality of output.

· Participate in various internal, external and international forums/projects on cyber security.

· Broad understanding of Financial Sectors operations will be provided so that we can better relate the linkages between business and cyber operation.

2. What we are looking for

• Strong interest in SOC operations.

• Hands-on experiences with implementing services/application on Windows and/or Linux preferred.

• Hands-on experiences with prevailing SIEM tools preferred.

• Hands-on experiences with prevailing cloud technologies preferred.

• Scripting/coding skills preferred.

• Normal office hours, but off-office hours standby to respond to exigencies is expected.

• Management of technical projects/implementation is expected.

• Writing of proposals and procurement related work is expected.

Job description
We are seeking a highly skilled and experienced Senior Cyber Security Analyst to join our team. As a Senior Cyber Security Analyst, you will play a pivotal role in safeguarding our organization's systems, networks, and data from cyber threats. Your expertise in cybersecurity frameworks, risk assessment, incident response, and security operations will be crucial in protecting our assets and ensuring compliance with industry regulations. This is an exciting opportunity to lead and contribute to our cybersecurity initiatives while mentoring junior team members.

Responsibilities:
• Lead the development and implementation of comprehensive cybersecurity strategies and initiatives.
• Conduct regular security risk assessments, identify vulnerabilities, and recommend appropriate controls and countermeasures.
• Monitor and analyze security events, alerts, and logs to detect and respond to potential threats and breaches.
• Lead incident response efforts, including investigation, containment, eradication, and recovery, ensuring timely and effective resolution.
• Collaborate with cross-functional teams to design and implement secure infrastructure, systems, and applications.
• Conduct security assessments and penetration testing to identify and address vulnerabilities.
• Provide guidance and support in the development and implementation of security policies, standards, and procedures.
• Stay up-to-date with the latest cybersecurity threats, trends, and technologies, and recommend proactive measures to enhance our security posture.
• Mentor and provide guidance to junior members of the cybersecurity team, promoting professional growth and development.
• Ensure compliance with relevant industry regulations and frameworks (e.g., ISO 27001, NIST, GDPR).

Requirements:
• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience).
• Must have at least 2 years of proven work experience as a Cyber Security Analyst, with a focus on security operations, incident response, and risk assessment.
• In-depth knowledge of cybersecurity principles, frameworks, and best practices.
• Experience with security monitoring tools, SIEM solutions, and threat intelligence platforms.
• Familiarity with penetration testing methodologies, vulnerability assessment tools, and secure coding practices.
• Strong understanding of network security, firewall configuration, intrusion detection systems, and endpoint protection.
• Proficiency in scripting languages (e.g., Python, PowerShell) for automation and security tool integration.
• Familiarity with cloud security principles and technologies (e.g., AWS, Azure).
• Excellent analytical and problem-solving skills, with the ability to analyze complex security issues and recommend effective solutions.
• Strong written and verbal communication skills, with the ability to convey complex security concepts to technical and non-technical stakeholders.
• Relevant certifications such as CISSP, CISM, CEH, or GIAC certifications are highly desirable.
• Proven leadership skills, with the ability to lead and mentor junior team members.

Additional Information:
We offer competitive compensation packages, a collaborative work environment, and opportunities for professional growth and development. If you are a highly skilled and motivated Senior Cyber Security Analyst looking to make a significant impact in a forward-thinking organization in Australia, we would love to hear from you. Apply today with your resume, cover letter, and any relevant certifications.

Permanent Residents (PR), Australian / Citizens are eligible to apply Job Type: Full-time Salary: $80,000 to $120,000 per year (inclusive of super)

Responsibilities

• Produce intelligence outputs to provide an accurate depiction of the current threat landscape and associated risk through the use of customer, community, and open source reporting
• Produce actionable intelligence information for delivery to colleagues and customers in the form of technical reports, briefings, and data feeds
• Participate in regular threat focus meetings with fellow SOCs
• Perform detailed investigative works into all traffic anomalies against established, historical baselines of individual agencies. Reviewing and profiling the events of all monitored clients
• Assist the Security Analysts with the investigative works
• Build rules and intelligence to detect such threats and proliferate to all monitored networks. Implementing and devising detection method of such threats in our security operations thru CESM IE/MCE Rules, DB scripts etc.
• Works with R&D for new signature package for deployment.
• Filtering and fine-tuning the security events flowing to our databases
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst
• Working with engineering team to set up new initiatives i.e. honeypot on the Internet ADSL link to improve security incident detection capabilities
• Monitor real-time third party security feeds, forums, and mailing lists to gather information on vulnerabilities and exploits related to the client
• Assess each event based on factual information and wider contextual information available
• Any other tasks as assigned

Requirements

• Degree holder with at least 5 years' of experience in related field and capacity
• Prior experience working in a Security Operations Centre (SOC) or Computer Emergency Response Team (CERT/CIRT).
• Possessed deep interest in open source research and critical thinking / contextual analysis abilities
• Investigative and analytical problem solving skills
• An understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security;
• Related professional cyber security certification, such as GCIA, CEH, will be preferred.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, source verification, data fusion, link analysis, and threat actor.
• Ability to research and characterize security threats to include identification and classification of threat indicators

We’re a global engineering, management and development consultancy. Everywhere around the world, people’s needs and aspirations are changing, fast. That brings increasing challenge for our clients, as you seek to satisfy your stakeholders, tackle societal issues and deliver your business strategy.
Our network of experts looks at problems from fresh angles and finds opportunities in complexity. They bring together diverse skills, experience and insight, to turn obstacles into sustainable solutions. Our aim: to add value at every stage, for you and the lives you touch every day.
Mott MacDonald

We’re a global engineering, management, and development consultancy. Our purpose is to improve society by considering social outcomes in everything we do, relentlessly focusing on excellence and digital innovation, transforming our clients’ businesses, our communities and employee opportunities.

A fundamental part of this is respecting each person’s differences and striving to meet their needs.

We are proud to be a one of Glassdoor’s top employers to work for in the UK, as well as being recognised as a Top Inclusive Company in the UK.

Our values: Progress, Respect, Integrity, Drive, Excellence.

About the business unit 

Mott MacDonald’s support services are the driving force behind our organisation enabling us to run efficiently and effectively. The team works collaboratively to offer specialist advice, best practice and technology to all areas of our business specifically designed for our global reach. 
Overview of role

This role will be based in one of our IT Hubs in either Dubai, India or the UK.
Working closely with the rest of the Project Managers Office we are looking for a professional with expertise in both Information Technology, Cyber and Information Security and Business Administration for the role of IT Business Analyst.

You will work alongside a global team, project and program managers, project directors and business stakeholders and security professionals to perform detailed requirements gathering and analysis, developing Statements of Work, business cases and assist in defining project scope and success criteria, supporting Mott MacDonald’s Information Security strategy.

The IT Business Analysts have exceptional analytical and interpersonal skills, as they act as a communication link between the IT department and other divisions. To succeed in this role, you should possess an analytical way of thinking and the ability to explain difficult concepts to non-technical users, be a self-starter and have a positive can-do attitude and they play a pivotal role in ensuring that our Projects deliver to a high level while adhering to Mott MacDonald's policies and procedures.

Key duties and responsibilities include


- Analyse business requirements with users. Determine feasibility, cost/time and resources required, compatibility with existing system(s), potential problem areas, recommending and presenting solutions, and meeting project objectives.
- Collaborate with stakeholders and users to assess the impact of proposed security policies, requirements and guidelines
- Analyse existing business processes and security controls to ensure they are fit for purpose in line with new or proposed security policy
- Leading and facilitating stakeholder collaboration and workshops, driving agreement for Information Security policy, process, requirements, guidelines, and publishing to Mott MacDonald’s process estate
- Work with project teams to develop project scope, budget, timeline, resources, risks, and project value.
- Ability to carry out process identification, definition and mapping. Participate in planning and designing business processes, including formulating recommendations to improve and support business activities.
- Elicit requirements using interviews, document analysis, requirement workshops, surveys, business process decomposition, epics/user stories, use cases modelling and specification, task and workflow analysis.
- Conduct detailed research in order to translate business requirements into precise, high quality user stories or functional specifications that are clear and concise and are easy to understand and implement by the development teams.
- Identify and validate key business requirements.
- Work closely with cross-functional teams and help deliver solutions that meet the businesses requirements.
- Communicate and collaborate with stakeholders to understand business strategies and future initiatives to determine future process and solution needs.
- Develop and execute business communications to internal and external stakeholders. Facilitation of User Acceptance Testing (UAT)


Candidate Specification

Essential


- Extensive demonstrable experience in Business Analysis.
- Requirements Elicitation, Analysis and Documentation
- Process identification, definition and mapping
- Workshop planning and execution
- Creation of UAT (User Acceptance Testing) Scripts


Desirable


- Agile / Scrum methodology experience would be beneficial but is not essential.
- A bachelor’s degree in IT or business management would be advantageous but is not essential.
- NIST Cybersecurity Framework, Cyber Essentials Plus, ISO 27001 (either qualification or experience)


Personal Attributes


- Problem-solving skills: an ability to identify the key points, understand everyone’s interest, list possible solutions, evaluate options, and document.


Equality, diversity, and inclusion
We put equality, diversity, and inclusion at the heart of our business, seeking to promote fair employment procedures and practices to ensure equal opportunities for all. We encourage individual expression in our workplace and are committed to creating an inclusive environment where everyone feels they can contribute.

Accessibility
We want you to perform your best at every stage in the recruitment process. If you are disabled or need any support to enable you to apply or attend an interview, please contact us at reasonable.adjustments@mottmac.com and we will talk to you about how we can support you.

Agile working
Happy to talk Flexible Working and how we can support your responsibilities beyond the workplace.

We offer some fantastic benefits including:

Health and wellbeing

- Private medical insurance for all UK colleagues.
- Health cash plan to support you with every day health costs and treatments.
- Access to Peppy, providing free support from menopause experts for all UK colleagues.
- A variety of wellbeing support is available through our comprehensive wellbeing program, including access for you and your family.
- Ability to flex your salary to opt into a wide range of health benefits, many of which can be extended to your family too.

Financial wellbeing

- We match employee pension contributions between 4.5% and 7%.
- Life assurance equal up to 4 x your basic salary, with an option to increase the level of cover to 6 x your salary.
- Our income protection scheme provides a financial benefit, as well as absence and return to work support due to long-term illness or injury.
- Flexible benefits, including increased life assurance cover, critical illness insurance, payroll saving and will writing.
- As an independently owned business we share the financial success of the business with all our colleagues in various ways including annual bonus schemes.

Lifestyle

- A minimum of 33-35 days holiday each year, inclusive of public holidays and dependent on level, with the ability to buy or sell leave through our flexible benefits programme.
- Holiday entitlement increased to a minimum of 35 days after 5 years’ service.
- Variety of employee saving schemes and discounts from high-street retailers.

Enhanced family and carers leave

- Enhanced family leave policies, including 26 weeks paid maternity and adoption leave, and two weeks paid paternity/partner leave.
- Our shared parental leave matches maternity leave meaning we pay up to 24 weeks at full pay.
- Up to five additional days leave are provided for those with significant caring responsibilities, two of which are paid.

Learning and development

- Primary annual professional institution subscription.
- A broad range of opportunities to enhance both technical and soft skills through mentoring, formal training, and self-development options.

Networks, communities, and social outcomes

- Join a wide range of groups including our Advanced Employee Networks which support our LGBTQ+, gender, race and ethnicity, disability, and parents/carers communities.
- Make a difference within our communities through our social outcomes.

Apply now, or for more information about our application process, click here.

Proud member of the Disability Confident employer scheme

What you get to do in this role
 
We are looking for a highly motivated, collaborative and technically experienced Security Compliance - Junior Analyst with ability to understand and influence cloud operational and security processes, effectively communicate ServiceNow’s controls including intent, and drive changes within the organisation through effective testing. The successful candidate must be reliable, resourceful and have a “can-do” attitude.  
 
You will be a key member of our team and play an important role in defining the Security and Compliance framework for a leading cloud company. In this role you will be required to demonstrate ability to analyse difficult problems, think out-of-box and provide pragmatic solutions and recommendations.   

ServiceNow current compliance initiatives are focused on, but not limited to Australia’s IRAP, Singapore MTCS, Japan’s ISMAP, and other global programs such as ISO 27001, ISO 27018, PCI, SSAE 18, and SOC 2. Security Compliance Junior Analyst will be involved in driving and measuring compliance for the cloud business systems, control areas, process, and product for company compliance initiatives.    
 
Responsibilities

• Perform activities to help measure and monitor compliance with company policies and procedures 
• Facilitate certifier requests and information gathering for audit activities and lead onsite audits
• Conduct activities to comply with the various Government Cyber Security requirements within the APJ
• Successfully drive security compliance testing activities across various teams within the organisation 
• Contribute by enhancing and maturing the existing common control framework 
• Liaise with Risk Management and conduct security risk assessment activities  
• Help our customers understand ServiceNow’s security and compliance control environment 
• Contribute towards enhancing the GRC tool and processes to meet compliance business needs 

We have an immediate position to be filled. Fresh graduates are welcome to apply to have a feel of what it's like to work in a Security, Network & Service Desk Operations Center.

Qualifications

• Fresh graduates Degree/Diploma/ITE in Computer Science or Information Technology or its equivalent, are welcome to apply
• Preferably with 1-2 years of experience in IT in system, network, and/or application security with knowledge of network and web-related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, BGP and other routing protocols)
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits, application of threat modeling or other risk identification techniques
• Possess basic technical knowledge in IT network infrastructure, server platforms (Unix, Windows platform) and desktops (OS X and Windows XP and the above)
• Excellent teamwork player
• Strong sense of ownership and drive

Tier 1 Functions and Responsibilities:

• Work in a rotational 24/7 environment
• Respond to the incoming enquiries/incident/request/alerts (Call, Email, Webchat, EUP, IVR handling, Monitoring consoles)
• 1st level troubleshooting of in supported systems; i.e. Workplace; Server; Network; Microsoft 365; Secure Access Service Edge; Point of Sale
• Security event monitoring - accurate and rapid response to security events, participate in incident response
• Server and network availability and performance monitoring
• Password reset and unlock
• Perform log & route [to higher tier or Resolver Team(s)]
• Record and manage all transactions/ cases in Service Management System
• Broadcast notifications to the relevant parties
• Provide timely status update, follow up on cases escalated until closure within the service level agreement.
• Ensure daily tasks are executed according to the Standard Operation Procedure