Senior Information Security Analyst

It’s an exciting time to join the Information Services department at Edinburgh Napier University, Scotland’s #1 Modern University.
The Information Services (IS) department is one of the largest professional services within the university responsible for the provision of technology, applications and library services. This is a time where real change is happening throughout the department, as it modernises and continues to adapt to best serve the needs of the wider university and a changing digital landscape.
The role of the Security Team is to keep the University and its people safe from all forms of cyber security threat, working to minimise the likelihood of disruption to teaching, research and business activities. It does this through a combination of security technologies, controls, processes, policies and by working in partnership with colleagues across the University to ensure that everyone understands the part they play in staying safe online.
The Role: As a Senior Information Security Analyst, you will utilise your experience working in defensive information security to drive all of the key operational activities of the Security Team, including continually improving our security controls, liaising with our external Managed Detection and Response (MDR) partner, investigating and resolving reported issues, handling requests and queries, maintaining and making changes to security solutions, establishing processes and creating documentation. You will develop your own knowledge and skills in the field of information security while supporting other team members to develop theirs and promote best practice with colleagues across the University.
Duties include:

• Plan and lead operational activities on security solutions e.g. configuration changes or upgrades, including acting as a peer reviewer for changes proposed by other team members and the identification and implementation of new solutions as required. This may occasionally require working outside normal business hours e.g. in evenings or at weekends.

• Act as a point of contact for security investigations, incident response activities and vulnerability assessments initiated by our external Managed Detection and Response (MDR) partner. This may occasionally require working extended hours as determined by the severity of the incident.

• Take an active role in discussions, meetings, reviews, groups and projects to ensure that information security issues are being adequately addressed and to offer specialist advice and direction as required, including the evaluation of proposed solutions and assessment of external suppliers.

• Lead Information Services projects, including the completion of all relevant project documentation, management of resources, planning of milestones, etc. You may be offered the opportunity to “buddy up” with an experienced project manager and undertake project management training and certifications to support you with this aspect of the role.

• Maintain an enthusiasm and passion for information security and a commitment to ongoing professional development in this area, by attending relevant conferences or events, obtaining recognised security certifications or developing a specialisation for a particular area of information security or technology.

What we will need from you:

• Knowledge of and experience using Microsoft 365, Azure, Cisco, VMware security solutions.
• Knowledge of relevant networking concepts — IP addresses, subnets, protocols/ports, DHCP, DNS, HTTP, TLS, VPN.
• Knowledge of basic operating system concepts
• Knowledge of basic system and application access control concepts
• Excellent attention to detail, ensuring that information is conveyed accurately, recorded precisely and tasks are completed correctly.
• Excellent analytical, logical thinking and problem-solving skills.
• Very good organisational skills and ability to deliver with minimal oversight.
• An independent and proactive learner, willing to share knowledge and seek support when necessary.

For a comprehensive list of duties and full job description, please click here.
If you would like to discuss the role informally prior to applying, please email Graeme Hamilton, Information Security Manager G.Hamilton@napier.ac.uk.
Our Excellent Benefits Package At ENU, we offer a great working environment where we support ambition, recognise achievement, and offer other excellent benefits including:

• Minimum of 41 days annual leave (including 10 fixed holidays at Easter and Christmas) and the option to purchase additional annual leave
• Generous employer pension contributions of 17.6%
• A wide range of learning and development opportunities
• Opportunity to join our staff inclusion and support networks
• Access to our benefits platform Vivup which includes huge range of discounts across the UK’s major retailers, health care discounts and Cycle to Work
• Access to our Employee Assistance Programme

Salary: £37,174 - £45,413 per annum (Grade 5)
Additional information: The closing date for this position is 11.59pm on 1st June.
Interviews will be held on an ongoing basis and you will be required to undertake an assessment activity as part of the interview process, if you are successful in progressing to that stage. The University may be able to sponsor the employment of international workers in this role. This will depend on several factors specific to the successful applicant. Check salary criteria for the visa on https://www.gov.uk/skilled-worker-visa. Contact us to discuss individual circumstances on recruitment@napier.ac.uk
Edinburgh Napier is committed to creating an environment where everyone feels proud, confident, challenged and supported and are holders of Disability Confident, Carer Positive and Stonewall Diversity Champion status. Please see here for more information.