IT Security Analyst

We are delighted to be working with a leading energy business who are looking to appoint an experienced IT Security person to join their onshore team, based in Aberdeen.

This is an exciting opportunity to play a key role in protecting the organisation’s IT environment, supporting both onshore and offshore operations. Working closely with internal IT teams, engineering, the wider Group and external security partners, you’ll be responsible for helping strengthen the company’s security posture, managing vulnerabilities and incidents, and ensuring security remains embedded across IT services.

The role offers a varied mix of IT security operations, policy and governance, vulnerability management, security architecture and user awareness, with the opportunity to work across both IT and OT environments. There will also be opportunities to visit offshore units and worldwide offices as required.

Responsibilities:

• Develop and maintain IT security policies, procedures and best-practice standards across the organisation.
• Continuously assess the organisation’s security posture, identifying vulnerabilities and implementing improvements where required.
• Support the secure design and architecture of IT services, ensuring security is considered throughout the development and implementation process.
• Coordinate vulnerability management activities and support the ongoing improvement of security controls.
• Monitor, investigate and report on security incidents, performance indicators and wider security activity.
• Work closely with the Data Protection Officer to support data protection and compliance requirements, including legal and Subject Access Requests.
• Collaborate with various stakeholders and wider Group IT teams on security initiatives, projects and improvements.
• Work with engineering teams on offshore security requirements and support the integration of IT and OT security practices.
• Liaise with the Group’s Managed Security Service Provider to monitor the environment and respond to security incidents.
• Manage and maintain the organisation’s enterprise backup system, ensuring appropriate security and resilience.
• Work closely with third-party suppliers and service providers on IT security requirements.
• Support internal and external IT security audits, tests and exercises.
• Develop and deliver security awareness and user education activities across the business.
• Implement IT changes in line with established change management processes.
• Maintain a strong awareness of emerging IT, information and cyber security risks, providing advice and guidance to colleagues where required.
• Participate in on-call and shift rotas and undertake offshore and international travel when required.

About you:

You’ll ideally have a degree in Computer Science, IT or a related discipline, alongside previous experience working within an information or cyber security role. You’ll have a good understanding of security best practices and frameworks such as NIST, CIS and ISO, together with practical experience implementing and managing IT security systems. Previous oil and gas experience and offshore exposure would be highly advantageous.

Professional qualifications such as CISA or CISSP, or demonstrable equivalent experience, would also be beneficial.

We’re looking for someone with strong organisational and communication skills who can work effectively with technical teams, business stakeholders and external providers.

Get in touch for more information!