Technology and Security Analyst

Key Responsibilities

• Carry out scheduled cyber hygiene checks covering user accounts, endpoint compliance, privileged access, and other agreed control areas.
• Carry out periodic identity and access assurance activities, including joiner, mover and leaver checks, and reviews of privileged or excessive access.
• Confirm exceptions with system owners, coordinate remediation, retain evidence and escalate overdue or high risk findings.
• Monitor vulnerability, configuration and security posture findings, validate affected assets, coordinate routine remediation and escalate significant or operationally sensitive issues.
• Conduct initial cyber security assessments for new applications, services and material changes using approved processes and templates, documenting findings, required controls and follow up actions.
• Review identified applications to ensure their business owner, purpose, users, data handled and approval status is kept up to date.
• Conduct initial vendor security assessments, gather and review supporting evidence, document findings, track agreed actions and escalate incomplete responses or material concerns.
• Support cyber security awareness activities, including communications, campaigns, events, guidance materials and practical learning exercises.
• Perform scheduled backup assurance checks, investigate failed, incomplete or overdue jobs with the relevant system owner or support provider, and maintain evidence of checks and corrective actions.
• Support cyber security incident investigation and response activities, such as helping to gather relevant evidence, maintaining accurate timelines, and recording actions.
• Produce concise periodic reporting on completed assurance activities, outstanding actions, recurring issues and material exceptions requiring management attention.
• Research relevant technologies, threats and working practices, sharing useful findings and practical recommendations with colleagues.

• Own routine application and end user technology support activities allocated to the role, troubleshooting issues through to resolution and coordinating escalation where specialist assistance is required.
• Carry out PC and laptop and, where appropriate, mobile phone provisioning, configuration, deployment, replacement and secure return activities in accordance with approved standards and procedures.
• Maintain accurate technology asset records covering ownership, assigned user, status, location, warranty, configuration, lifecycle stage and disposal.
• Coordinate secure asset decommissioning activities.
• Provide practical meeting room and audiovisual support, helping colleagues use facilities effectively.
• Support technology and cyber security projects through testing, implementation, documentation, user support and transition into business as usual operation.
• Help to create and maintain clear standard operating procedures, technical records, support guides, how to articles and knowledge materials.

Skills, Knowledge and Expertise

• A strong interest in both cyber security and practical technology support
• Excellent listening, communication and customer service skills
• A proactive and methodical approach to work
• The ability to prioritise a varied workload and follow tasks through to completion
• Strong attention to detail, with accurate record keeping and documentation
• A personable and collaborative approach when working with colleagues and suppliers
• A willingness to learn, develop technical capability and seek guidance when required
• The judgement to recognise and promptly escalate security concerns, unusual activity and higher risk decisions
• A continuous improvement mindset, including identifying opportunities to simplify or automate routine activities
• A focus on delivering a secure, reliable and positive end user experience

• A practical understanding of cyber security fundamentals, including identity, access control, endpoint security, vulnerability reduction and secure data handling
• Experience supporting Windows PCs and laptops, common business applications, peripherals and meeting room or audiovisual technology
• Experience using service management, endpoint management, identity, security monitoring or asset management tools
• An understanding of the technology asset lifecycle, including provisioning, inventory management, maintenance and secure disposal
• The ability to review technical information, supplier responses and system configurations, and to document clear findings and actions
• Relevant experience in a technology support, cyber security, systems administration or similar role is desirable
• Relevant technical or cyber security qualifications are desirable, but demonstrable aptitude, practical experience and a commitment to development are equally important

Benefits

• Pension – Membership of the defined contribution scheme. Jersey Water pays 5% up to 5 years’ service and then 10%, employees pay 5%. A matching scheme is available whereby Jersey Water matches additional voluntary contributions up to a maximum of 5%.
• Death in Service – 4 times salary
• Private health scheme – Non contributory