Cyber Operations Analyst - Internal

Cyber Operations Analyst - Internal Applicants Only

*** This role is currently only open to employees of Arbuthnot Latham***

Arbuthnot Latham has been associated with banking since 1833. We combine private and commercial banking, wealth planning and investment management. We believe in traditional relationship and service-led banking powered by modern technology.

Job Purpose

Support the Bank's operational cyber security capability through cyber security monitoring, incident response coordination, vulnerability management, supplier assurance and operational reporting activities.

To place the interests of customers at the centre of all activities, act in a way that is consistent with achieving good outcomes for consumers; and to comply with the FCA and PRA’s Conduct Rules.

Job Description

Key Responsibilities:

• Support the day-to-day oversight of outsourced cyber security services, including Managed Detection and Response (MDR), Security Operations Centre (SOC) and threat monitoring providers.
• Coordinate cyber security alerts, incidents and escalations, ensuring actions, decisions and outcomes are appropriately recorded and tracked.
• Act as Incident Coordinator during cyber security incidents, supporting incident management, communications, action tracking and post-incident activities.
• Maintain incident, vulnerability, threat intelligence and operational cyber security registers, ensuring records remain accurate and up to date.
• Monitor vulnerability remediation activities and track progress against agreed remediation targets and risk tolerances.
• Support cyber threat intelligence activities, including the production of threat updates, reporting and management information.
• Support the operational effectiveness of cyber security tooling and services, ensuring incidents, alerts and service performance are appropriately monitored and reported.
• Coordinate penetration testing activities, remediation tracking and assurance reporting.
• Support supplier security reviews and third-party assurance activities, including evidence collection, action tracking and reporting.
• Assist with cyber incident exercises, tabletop simulations and operational resilience testing activities.
• Maintain cyber operational procedures, playbooks, runbooks and supporting documentation.
• Produce cyber operational dashboards, management information, Key Risk Indicators (KRIs) and performance metrics.
• Monitor service performance against agreed cyber security service levels, KPIs and contractual obligations.
• Support attack surface management, threat exposure management and cyber hygiene improvement activities.
• Analyse operational cyber security data and identify trends, risks or issues requiring escalation.
• Develop professional knowledge and capability across cyber operations, incident response, threat management and cyber security disciplines.

Key Interfaces:

• Cyber Operations & Third-Party Security Manager
• Head of Cyber
• Cyber Governance & Compliance Manager
• Cyber Assurance & Architecture Manager
• IT Infrastructure & Operations
• Digital Workplace Team
• Service Desk
• Operational Resilience Function
• Third-Party Suppliers
• Managed Security Service Providers (SOC/MDR)
• Internal and External Auditors

Knowledge/
Experience/

Skills:

• Strong analytical, organisational and problem-solving skills.
• Ability to coordinate multiple activities and maintain accurate records.
• Strong written and verbal communication skills.
• Ability to work effectively under pressure and manage competing priorities.
• Strong attention to detail.
• Understanding of cyber security fundamentals and cyber threat concepts.
• Understanding of incident response, vulnerability management and cyber operations principles.
• Familiarity with Microsoft 365 and reporting tools.
• Ability to analyse information and…