Cyber Security Analyst

Job description

The role of Cyber Security Analyst is important to us. As part of our dedicated Cyber Security team, you will report to our Head of Cyber and be based from our Emperor Court office in Crewe, Cheshire. As a Cyber Security Analyst, you will play a key role in protecting systems, networks, and data against cyber threats. You will participate in threat detection and incident response efforts, support the development of security policies and controls, and work closely with stakeholders to ensure compliance and security best practice across the business. You will also assist with maintaining and improving the company’s accredited Information Security Management System (ISMS), with a particular focus on ISO 27001 and Cyber Essentials Plus requirements. In addition, you will work collaboratively with the wider Cyber Security team to define and mature Security Operations Centre (SOC) processes, ensuring the effective day-to-day operations of security controls. This is an excellent opportunity for a seasoned professional to contribute to a high-performing Cyber Team in a fast-paced and evolving environment. Your responsibilities day to day will be… Work closely with IT Operations teams and wider business functions to implement and optimise technologies and security controls that enhance the organisation's cyber security posture across internal and customer-facing platforms. Proactively identify cyber security risks, control deficiencies and opportunities for security improvement, making recommendations to reduce organisational risk. Support the design, implementation and ongoing development of cloud-based infrastructure and services, ensuring security best practices are embedded by design. Collaborate with software development teams to ensure secure design principles and cyber security requirements are integrated throughout the Software Development Lifecycle (SDLC). Create, maintain and review cyber security policies, standards, procedures and technical documentation. Monitor security events and alerts, conducting threat detection, investigation and incident response activities to minimise business impact. Perform vulnerability management activities, including vulnerability identification, risk assessment, remediation tracking and reporting. Conduct threat intelligence research, analysing emerging threats, vulnerabilities and attack techniques, and recommend appropriate security improvements. Work with third-party security vendors, managed service providers and consultants to support security operations, resolve issues and implement security enhancements. Lead cyber security projects and initiatives aimed at improving the organisation's security capability, resilience and compliance posture. Contribute to the development and maintenance of security monitoring, detection and response capabilities across the organisation. Assist with security risk assessments, audits, compliance activities, and the implementation of security controls aligned to recognised frameworks and standards. What do we expect of you? Technical knowledge and skills: Strong technical knowledge of cyber security and its practical application across technology environments. Good understanding of application security and experience working with development teams to promote secure development practices. Experience with Vulnerability Management, penetration testing and security assessments, including prioritising and driving remediation. Experience with EDR, NDR and SIEM technologies, including security monitoring, alert investigation and response. Understanding of cyber incident response, including triage, investigation, containment and recovery. Knowledge of Cyber Essentials, Cyber Essentials Plus and ISO 27001. Good understanding of operating systems, infrastructure and networking, including Windows and Linux environments, servers, virtualisation, databases, web servers, TCP/IP, DNS, firewalls and common infrastructure security controls. Good understanding of cloud security, preferably AWS, including IAM, logging, monitoring and configuration. Understanding of DLP, data security and open-source/software supply-chain risk. Good understanding of network security, WAFs, IAM and secure architecture principles. Understanding of Red Teaming, Continuous Adversarial Testing and Vulnerability Disclosure Programmes. Understanding of Cyber Threat Intelligence, phishing, social engineering and insider risk management. Good understanding of MITRE ATT&CK and NIST Cybersecurity Frameworks. Strong analytical and problem-solving skills, with the ability to investigate technical security issues and recommend appropriate actions. Ability to produce clear technical documentation, reports and security recommendations. Ability to communicate effectively with technical and non-technical stakeholders. Understanding of ITIL/service management principles and the ability to manage and prioritise multiple activities. Commitment to keeping up to date with emerging technologies, threats and cyber security practices. Behavioural Expectations: Works with autonomy and drive - takes initiative, identifies what needs to be done and proactively progresses work through to a successful outcome. Collaborative and approachable - builds positive relationships and works effectively across Cyber, IT and the wider business. Impact-focused - takes a practical and proportionate approach to security, considering the impact on customers and the wider business. Agile and adaptable - responds positively to changing priorities, emerging threats and new technologies. Innovative and forward-thinking - challenges existing approaches and looks for better ways to improve security. Continuous improvement mindset - actively looks for ways to improve processes, technology and security capability. Inclusive team player - values different perspectives and contributes to a supportive team environment. Accountable and dependable - takes ownership of commitments and follows work through to completion. Constructively challenges - confidently raises security concerns and provides evidence-based recommendations. Learning mindset - actively develops technical knowledge and keeps pace with the evolving cyber security landscape. What you can expect from us… A standout workspace Based next to our Radius Campus HQ in Crewe, you’ll enjoy: Modern, collaborative workspaces Onsite gym, café, and barista station A unique sports bar And yes… Doctor Who themed features! Career development Your impact on Radius will be rewarded with the opportunity to progress your career in many directions. The development of our people has always been a priority for us. We have established a culture of continuous learning and knowledge-sharing which means our colleagues are constantly exposed to new experiences and ways of working. Every individual, from entry-level to the senior team, have their own personal development plans with clear routes for progression and regular reviews. Rewards and benefits In addition to a competitive salary, you’ll have access to a reward and benefits package which includes: Pension Life assurance Employee fuel card scheme Electric Vehicle scheme Employee assistance programme Wellness and healthcare assistance via ‘Help@Hand’ by Unum ‘Cycle to work’ scheme Free breakfast daily in the office Free gym access at nearby Radius Campus HQ About Radius… Driving business forward Radius offers fuel cards, telematics, vehicle leasing, EV charge points, telecoms and more to businesses globally. Established in 1990, we're trusted by over 470,000 businesses to help them grow and become more productive. With over 3000 colleagues across 5 continents, our people are critical to our success as we develop new innovative products across a growing range of businesses. Our values... Driven - W e are ambitious and tenacious. We constantly strive for more, we look to the future, and we are already working on what’s next. Agile - We are quick to adapt to change. We stay ahead of market trends and create solutions for the future. Innovative - The status quo is there to be challenged. We are passionate about pushing boundaries and always think bigger. Inclusive - We know the value of our customers, partners, suppliers and colleagues. We encourage inclusivity and work collaboratively. #LI-TB1 Diversity, Equality & Inclusion at Radius Our global DEI networks champion LGBTQ+ inclusion, cultural diversity, women’s empowerment and mental health, neurodiversity and disability support. We also offer: Global Female Health Policy & Female Health Champions Pregnancy Loss and Fertility Treatment Policies Endometriosis Friendly Employer (UK) Women-focused gym & female health events Mental Health First Aiders Disability Confident Committed Employer (Level 1) Race at Work Charter signatory Proud sponsor of Crewe Pride (5 years running) and Cheshire Pride Awards Corporate Supporter 2025 Community network driving charity and volunteering initiatives, with 8 consecutive years of participation in the UK Challenge. Give as you earn scheme (payroll giving) and match funding Next Steps If you feel we are a good match for each other, you can apply online now! If you’d like to understand more about the role or life at Radius before applying, then please contact our talent team directly. Radius is an equal opportunities employer. We are committed to welcome people regardless of age, disability, gender identity, race, faith or belief, sexual orientation or socioeconomic background. We are committed to ensuring an inclusive and accessible recruitment process for all candidates. If you require any adjustments or accommodations at any stage of the process, please let us know, and we will do our best to support you. We reserve the right to close a vacancy before the closing date in the event of an overwhelming response or a change in business priorities. Note to recruitment agencies: We do not accept speculative recruitment agency CVs or profiles. Any unsolicited CV received by Radius will be treated as a gift and not eligible for an agency fee. PSL agencies should only send CVs via our Applicant Tracking System, when approved to do so by the Radius Talent Team.