Be part of a team at
the cutting edge of Cyber

Duties

Including but not limited to:

•Monitoring and analysing computer networks for security threats and vulnerabilities.

•Conducting vulnerability assessments and penetration testing to identify and address potential weaknesses in the organisation’s security systems.

•Developing and implementing security policies and procedures to protect the organisation’s systems and data.

•Conducting forensic analysis of security breaches and incidents to determine the cause and prevent future incidents.

•Configuring and maintaining security systems such as firewalls, intrusion detection/prevention systems, and anti-virus software.

•Collaborating with other IT professionals to ensure that security protocols are integrated into all aspects of the organisation’s technology infrastructure.

•Keeping up-to-date with the latest security trends and technologies to ensure that the organisation’s security measures are effective and up-to-date.

Prerequisite Skills

A bachelor’s or master’s degree in Computer Science, Information Technology, Cyber Security, or a related field is usually required. Some employers may also prefer candidates with a specialised degree or certification in Cyber Security.

Cyber Security Analysts need to have a solid understanding of various operating systems, network protocols, and programming languages. They should also have experience working with firewalls, intrusion detection systems, anti-virus software, and other security tools.

Should have strong analytical and problem-solving skills to identify and resolve complex security issues.

They should have excellent verbal and written communication skills to effectively communicate security risks and vulnerabilities to technical and non-technical stakeholders.

Cyber Security Analysts should have a keen eye for detail and a meticulous approach to work to identify and prevent security threats.

Certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), and Certified Ethical Hacker (CEH) are highly desirable for Cyber Security Analyst positions.

While entry-level positions may be available, many employers prefer candidates with at least 1-2 years of experience in Cyber Security or a related field.

Cyber Security Analyst Apprenticeships

Completing an apprenticeship in a relevant area can demonstrate a candidate’s commitment to the field of cybersecurity, as well as their ability to learn and apply new concepts in a hands-on setting.

An apprenticeship can provide opportunities for candidates to work alongside experienced professionals in the field, gaining valuable insight and mentorship that can prepare them for a successful career as a Cyber Analyst.

Duties

Including but not limited to:

•Pen Testers are responsible for conducting penetration tests to identify security vulnerabilities and weaknesses in an organisation’s network and computer systems. This involves simulating real-world cyber-attacks to assess the organisation’s security posture.

•Documenting and reporting on their findings, including any vulnerabilities that they have identified and any recommendations for improving the organisation’s security.

•Working closely with other IT teams to ensure that identified vulnerabilities are remediated and that the organisation’s security systems are maintained and updated.

•Staying up-to-date with the latest cyber-security threats and trends, and for continuously developing their skills and knowledge.

•Ensuring that the organisation is compliant with relevant regulations, such as GDPR and PCI-DSS, and that security policies and procedures are in place and adhered to.

Prerequisite Skills

A bachelor’s degree in Computer Science, Cyber Security, Information Technology or a related field is usually required. Some employers may also prefer candidates with a specialised degree or certification in Penetration Testing.

Pen Testers need to have a strong technical background and understanding of computer systems, network protocols, and programming languages. They should also have experience working with various security tools, such as penetration testing frameworks, vulnerability scanners, and exploit development tools.

Certifications such as Offensive Security Certified Professional (OSCP), Certified Ethical Hacker (CEH), and Certified Penetration Testing Engineer (CPTE) are highly desirable for Pen Tester positions. Our Become a Pen Tester qualification is also an excellent place to start.

Should have strong analytical and problem-solving skills to identify and exploit security vulnerabilities in systems.

Have excellent verbal and written communication skills to effectively communicate security risks and vulnerabilities to technical and non-technical stakeholders.

Pen Testers should have a keen eye for detail and a meticulous approach to work to identify and prevent security threats.

While entry-level positions may be available, many employers prefer candidates with at least 2-3 years of experience in Cyber Security or a related field.

Duties

Including but not limited to:

•SOC Managers are responsible for overseeing the day-to-day operations of the SOC, which includes monitoring network traffic and security alerts, investigating potential security incidents, and managing incident response activities.

•Managing and leading a team of security analysts and engineers, including hiring, training, and performance management.

•Developing and implementing the organisation’s security strategy, which includes defining security policies and procedures, identifying and mitigating security risks, and ensuring compliance with relevant regulations.

•Managing incident response activities, including investigating potential security incidents, containing and mitigating the impact of incidents, and communicating with stakeholders.

•Staying up-to-date with the latest security threats and trends and for integrating threat intelligence into the organisation’s security strategy.

•Collaborate closely with other departments, such as IT, risk management, and compliance, to ensure that security policies and procedures are aligned with business objectives. They also need to communicate with senior management and other stakeholders to provide updates on security incidents and the overall security posture of the organisation.

Prerequisite Skills

A bachelor’s degree in Computer Science, Cyber Security, Information Technology, or a related field is usually required. Some employers may prefer candidates with a specialised degree or certification in Cyber Security.

SOC Managers need to have a strong technical background and understanding of computer systems, network protocols, and security technologies. They should also have experience working with security tools such as SIEM, IDS/IPS, and vulnerability scanners.

You need to have excellent management skills, including experience in team management, performance management, and talent development.

Industry certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA) are highly desirable for SOC Manager positions.

SOC Managers should have excellent communication skills to effectively communicate with technical and non-technical stakeholders, including senior management.

Strong analytical and problem-solving skills to identify and mitigate security threats.

While entry-level positions may be available, many employers prefer candidates with at least 5-10 years of experience in Cyber Security or a related field, with at least 2-3 years in a management role.

Duties

Including but not limited to:

•Developing and implementing policies and procedures that ensure compliance with relevant regulations and standards, protect sensitive information, and manage information assets effectively.

•Managing the organisation’s information assets, including identifying, classifying, and safeguarding information. They are also responsible for ensuring that information is available to the right people at the right time.

•Ensuring that the organisation complies with relevant regulations and standards, such as GDPR, HIPAA, and ISO 27001. They are also responsible for conducting audits and assessments to identify and mitigate compliance risks.

•Managing information-related risks, including cyber risks, data breaches, and other security incidents. They should be able to identify and mitigate risks, and develop risk management strategies.

•Providing guidance and training to staff on information management and governance policies and procedures. They should also be able to communicate complex technical concepts to non-technical stakeholders.

•Collaborate closely with other departments, such as IT, legal, risk management, and compliance, to ensure that information management and governance policies and procedures are aligned with business objectives. They also need to communicate with senior management and other stakeholders to provide updates on information governance and compliance.

Prerequisite Skills

A bachelor’s degree in Information Management, Computer Science, Business Administration or a related field is usually required. Some employers may prefer candidates with a specialised degree or certification in Information Governance.

Information and Governance Managers need to have a strong technical background and understanding of information management systems, data protection regulations, and information security technologies. They should also have experience working with information governance tools and frameworks.

You need to have excellent management skills, including experience in team management, performance management, and talent development.

Industry certifications such as Certified Information Professional (CIP), Certified Records Manager (CRM), or Information Governance Professional (IGP) are highly desirable for Information and Governance Manager positions.

Information and Governance Managers should have excellent communication skills to effectively communicate with technical and non-technical stakeholders, including senior management.

You should have strong analytical and problem-solving skills to identify and mitigate information-related risks.

While entry-level positions may be available, many employers prefer candidates with at least 5-10 years of experience in Information Management, Information Governance or a related field, with at least 2-3 years in a management role.

Duties

Including but not limited to:

•Reviewing and evaluating an organisation’s existing security infrastructure to identify potential vulnerabilities, weaknesses, and areas of risk.

•Develops audit plans that outline the scope of the audit, testing methodology, and timelines.

•Performs audits of information systems, policies, and procedures to ensure compliance with regulatory requirements, industry standards, and best practices.

•Analyses the results of the audit to identify areas of improvement and to recommend actions to mitigate risks.

•Presents audit reports to stakeholders, including senior management, to communicate audit findings, recommendations, and potential risks.

•Provides guidance and support to stakeholders on security best practices and industry standards.

•Keeps up-to-date with the latest security threats, vulnerabilities, and industry standards to ensure the effectiveness of security controls.

Prerequisite Skills

A bachelor’s degree in Computer Science, Information Technology, or a related field is usually required. Some employers may prefer candidates with a Master’s degree or other relevant certifications.

Information Security Auditors should hold professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified Ethical Hacker (CEH).

You will need to have a strong technical background in security technologies, network security, and risk assessment. You should also have experience with security-related tools and technologies.

Strong analytical and problem-solving skills to identify potential risks, vulnerabilities, and weaknesses in an organisation’s security infrastructure.

Excellent communication skills to effectively communicate with technical and non-technical stakeholders, including senior management.

Have a good understanding of industry standards, regulations, and best practices related to information security.

While entry-level positions may be available, many employers prefer candidates with at least 3-5 years of experience in Information Security, Risk Management or a related field.

Duties

Including but not limited to:

•Conducting risk assessments to identify potential IT risks and vulnerabilities, and developing strategies to mitigate those risks.

•Ensuring that the organisation is compliant with industry standards, regulations, and laws related to IT risk management and cybersecurity.

•Developing and implementing IT risk management policies and procedures to ensure consistency and compliance across the organisation.

•Educating employees and stakeholders on IT risk management best practices, procedures, and policies.

•Leading and coordinating the incident response team in case of a cyber attack or other IT security incident.

•Developing and implementing business continuity and disaster recovery plans to ensure that critical IT systems and data are protected and recoverable in case of a disaster.

•Managing and monitoring the risks associated with third-party vendors and service providers.

•Conducting regular IT risk assessments and audits to identify and address potential security weaknesses, and producing regular reports on the status of IT risk management to senior management.

Prerequisite Skills

Most IT Risk Managers have a degree in a related field such as computer science, information systems, or cybersecurity. A master’s degree in a related field can also be an advantage.

Typically you need to have several years of experience in IT operations or security, often in roles such as network administrator, security analyst, or IT auditor.

You can benefit from obtaining relevant certifications such as Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP), or Certified Information Systems Auditor (CISA).

Must be able to understand the business goals of the organisation and align IT risk management strategies with those goals.

Need to be able to analyse and assess risks and vulnerabilities in IT systems, and develop effective strategies to mitigate those risks.

Strong communication skills to communicate with stakeholders across the organisation, including senior management, technical staff, and non-technical staff.

You must be able to lead teams and coordinate activities across the organisation to achieve IT risk management goals.

Duties

Including but not limited to:

•Developing and maintaining an organisation’s information security policies and procedures, and ensuring that they align with regulatory requirements and industry standards.

•Managing security operations, including incident response, vulnerability management, threat detection, and security monitoring.

•Responsible for raising security awareness and ensuring that all staff are trained on security policies and procedures.

•Conducting regular risk assessments to identify potential security threats and vulnerabilities and developing strategies to mitigate those risks.

•Developing and managing the security budget, including allocating resources to security projects and ensuring that spending is aligned with the organization’s security goals.

•Ensuring that the organisation is in compliance with relevant data protection regulations and standards.

•Reporting on the state of the organisation’s information security posture to senior management and providing recommendations for improving security.

Prerequisite Skills

A bachelor’s degree in a relevant field such as computer science, information technology, or cybersecurity is often required. Some organisations may require a master’s degree or a PhD in a related field.

Relevant industry certifications such as CISSP, CISM, CRISC, or other recognised cybersecurity certifications are highly desirable.

A minimum of 10 years of experience in information security or related fields is usually required, with a minimum of 5 years in a leadership or managerial position.

A CISO should have a deep understanding of technical security practices, tools, and techniques. Experience in cybersecurity, risk management, data protection, and compliance is also essential.

Have strong leadership and management skills, including the ability to communicate effectively, build and manage a team, and work collaboratively with other departments and stakeholders.

Have the ability to think strategically and develop long-term security plans that align with the organisation’s goals and objectives.

A deep understanding of relevant data protection regulations, such as GDPR and CCPA, and how they apply to the organisation.

Duties

Including but not limited to:

•Cyber Security Engineers are responsible for designing and implementing security systems to protect the organisation’s networks, systems, and data.

•They must identify vulnerabilities and threats to the organisation’s systems and develop plans to mitigate them.

•Conducting security assessments to identify risks and vulnerabilities in the organisation’s systems and networks.

•In the event of a security incident or breach, Cyber Security Engineers must respond quickly to contain the incident, investigate the cause, and implement measures to prevent future incidents.

•Configuring and maintaining security tools such as firewalls, intrusion detection and prevention systems, and security information and event management (SIEM) systems.

•Provide security guidance and training to employees and other stakeholders in the organisation to ensure they understand security policies and procedures and can identify potential security risks.

•Must stay up to date with the latest security trends and technologies to ensure that the organisation’s security measures are effective and up to date.

Prerequisite Skills

A bachelor’s or master’s degree in computer science, information technology, or a related field is typically required. Some organisations may prefer a degree specifically in cybersecurity or information security.

Cyber Security Engineers should hold relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or CompTIA Security+.

Should have strong technical skills in areas such as network security, encryption, firewalls, intrusion detection and prevention, security information and event management (SIEM), and penetration testing.

Strong written and verbal communication skills are essential for Cyber Security Engineers, as they must communicate complex technical information to non-technical stakeholders and management.

Have strong analytical and problem-solving skills to identify and address security issues, evaluate risks, and develop solutions.

Relevant work experience in cybersecurity or information security is typically required, with most organisations seeking candidates with 3-5 years of experience.

Duties

Including but not limited to:

•Cyber Security Project Managers are responsible for planning and managing cybersecurity projects, including setting goals, defining tasks, establishing timelines, and monitoring progress.

•Allocating resources, including personnel, equipment, and budget, to ensure that the project is completed within the established timelines and budget.

•Conducting risk assessments to identify potential cybersecurity threats, vulnerabilities, and impacts on the project, and implement measures to mitigate these risks.

•Working closely with stakeholders, team members, and external partners to ensure that the project is completed successfully. They must also communicate regularly with management and other stakeholders to provide updates and address any issues.

•Implementing quality assurance processes to ensure that the project meets established standards, including cybersecurity standards.

•Documenting the project progress, issues, and outcomes, and prepare regular reports for management and other stakeholders.

Prerequisite Skills

A bachelor’s degree in cybersecurity, computer science, information technology, or a related field is usually required for this role. Some employers may require a master’s degree or equivalent experience.

A good understanding of cybersecurity principles, concepts, and practices is essential for this role, including knowledge of security frameworks such as ISO 27001, NIST, and PCI DSS.

Experience in managing cybersecurity projects is essential, including skills in project planning, resource management, risk assessment, and quality assurance.

Cyber Security Project Managers must be able to lead and motivate teams, and communicate effectively with stakeholders and team members.

The ability to analyse complex information, identify problems, and develop effective solutions is essential for this role.

Relevant cybersecurity and project management certifications such as CompTIA Security+, Certified Information Systems Security Professional CISSP or Project Management Professional (PMP) are preferred.

Duties

Including but not limited to:

•Developing and implementing cyber security policies, procedures, and standards to protect the organisation’s information and assets.

•Identifying and assessing cyber security risks and threats, and developing strategies to mitigate them.

•Managing cyber security incidents and breaches, including investigating incidents, assessing impact, and coordinating response activities.

•Leading and managing a team of cyber security professionals, including hiring, training, and performance management.

•Conducting cyber security awareness and training programs for employees and stakeholders.

•Monitoring and analysing cyber security trends, threats, and technologies, and recommending appropriate measures to enhance the organisation’s security posture.

•Collaborating with other business units and stakeholders to ensure cyber security requirements are integrated into business processes and projects.

•Managing budgets and resources for cyber security projects and initiatives.

•Maintaining knowledge of relevant laws, regulations, and industry standards related to cyber security.

Prerequisite Skills

A bachelor’s degree in computer science, cyber security, information technology, or a related field is often required. Some employers may prefer or require a master’s degree or other advanced degree.

Typically, Cyber Security Managers will have several years of experience in cyber security roles such as security analyst, engineer, or consultant. They may also have experience in managing teams or projects.

May hold one or more professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Ethical Hacker (CEH).

Should have a strong understanding of cyber security principles and technologies, as well as experience with tools and platforms used in cyber security operations.

Have strong leadership, communication, and problem-solving skills, as well as the ability to work effectively with stakeholders across the organisation.

Duties

Including but not limited to:

•Identifying potential risks and vulnerabilities in an organisation’s information systems and infrastructure and providing recommendations for improving security measures.

•Conducting security audits to assess an organisation’s compliance with regulatory requirements and industry best practices.

•Implementing security measures such as firewalls, intrusion detection and prevention systems, and access controls.

•Providing support in the event of a security breach or incident, including investigation, containment, and recovery.

•Developing and delivering training programs to educate employees on cyber security best practices and help them understand their role in maintaining a secure environment.

•Communicating with clients and stakeholders to understand their needs and requirements and provide regular updates on cyber security activities and risks.

•Staying up-to-date with the latest trends and developments in cyber security and identifying opportunities for innovation and improvement.

Prerequisite Skills

A degree in computer science, cyber security, or a related field is often required. Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Certified Information Security Manager (CISM) may also be beneficial.

Previous experience in cyber security or a related field is often required, with many employers looking for candidates with 3-5 years of experience or more.

A strong understanding of cyber security principles and technologies such as firewalls, intrusion detection and prevention systems, and vulnerability scanning tools is essential. Experience with programming languages, network protocols, and operating systems is also valuable.

A Cyber Security Consultant must be able to analyse complex data sets and identify trends, anomalies, and potential risks.

Strong verbal and written communication skills are essential, as Cyber Security Consultants must be able to explain technical concepts and risks to non-technical stakeholders and work collaboratively with clients and team members.

Must be able to identify and solve complex problems related to cyber security.

A strong understanding of the regulatory and compliance landscape in the UK, as well as the specific challenges faced by different industries, is often beneficial.

Duties

Including but not limited to:

•Creating and delivering training programs that cover a range of cybersecurity topics such as network security, threat detection and response, and security operations.

•After delivering training, a Cyber Trainer may evaluate its effectiveness by assessing how well learners have retained the information and if they have applied it in practical situations.

•Create educational resources such as presentations, training manuals, or online courses to support the learning of cybersecurity skills.

•Cybersecurity is a constantly evolving field, so a Cyber Trainer needs to stay up-to-date with the latest industry developments and emerging threats to ensure their training is relevant and effective.

•Work with other cybersecurity professionals to design training programs and to share knowledge and best practices.

•A Cyber Trainer may provide feedback and support to learners to help them improve their understanding of cybersecurity concepts and to address any gaps in their knowledge.

•Assist with cybersecurity awareness initiatives aimed at educating employees or the wider public on the importance of cybersecurity practices and how to avoid cyber threats.

Prerequisite Skills

A strong understanding of cybersecurity concepts, technologies, and tools is essential for a Cyber Trainer. They should be familiar with topics such as threat intelligence, incident response, network security, encryption, and vulnerability assessment.

A Cyber Trainer typically needs to have several years of experience working in the cybersecurity industry, in roles such as security analyst, penetration tester, or security consultant. This experience helps them to understand the practical applications of cybersecurity concepts and to keep their training relevant to current industry practices.

Should have teaching or training qualifications, such as a teaching degree or a professional qualification in training, such as the CIPD (Chartered Institute of Personnel and Development) Certificate in Learning and Development Practice.

Strong communication skills are crucial for a Cyber Trainer, as they need to be able to explain complex cybersecurity concepts to learners with varying levels of technical knowledge.

Cybersecurity is a constantly evolving field, so a Cyber Trainer should have a willingness to continuously learn and develop their skills and knowledge.

Professional certifications in cybersecurity such as Certified Information Systems Security Professional (CISSP) or CompTIA Security+ can be advantageous for a Cyber Trainer to demonstrate their knowledge and expertise in the field.