Cyber Security Analyst

A little bit about us:

East West Rail is an infrastructure programme connecting communities between Oxford and Cambridge. The area is currently let down by a lack of transport choices, and we have a once-in-a-generation opportunity to fix that, improving prosperity for people and places along the way.

East West Railway Company (that's us) was created by the Department for Transport (DfT) to oversee the delivery of East West Rail from construction through to wheels in motion, making sure the railway comes together in the right way.

At East West Railway Company, we're committed to building an inclusive railway for all. We believe that to do that, we must nurture a diverse team that represents the UK communities that we impact. Our approach is simple: to create an environment where everyone is welcome and able to be themselves. We celebrate diversity and are proud to be an equal opportunity employer.

We encourage applications of all backgrounds and experiences.

Role Summary The Cyber team at EWR acknowledges that security must be applied not only to our technology, but also our people, processes and our data. The Cyber Security Analyst will play a key role in strengthening the organisation's cyber resilience. The role focuses on the effective use of the Microsoft security stack to establish prevention, detection and response to cyber-attack.

It also helps operate security technologies such as DLP and Purview, and contributes to cyber assurance activities. In addition, the role contributes to the smooth running of IT operations by assisting the IT Helpdesk with incoming tickets.

Function The Corporate Services function is accountable for providing core enabling capability to the other functional areas in EWR to maximise performance of the organisation, including IT, HR, financial management, and legal services. It is accountable for providing reporting services to enable decision making, and for assuring that quality systems and processes are in place.

Key Responsibilities In this role, you will:

Assist the Cyber Lead in delivering EWR's IT Cyber Strategy.

Work with the Legal Team in the event of DSARs and FoI requests.

Work within the Microsoft Security Stack (Defender, Purview, Entra and others) to establish and maintain a robust control set, and work with East West Rail's Security Operations Centre (SOC) to monitor events for malign activity and indicators of compromise.

Maintain high-quality documentation of configuration, standards and procedures.

Support the Cyber Lead in gathering KPIs for reporting to the SIRO.Respond to suspected or actual cyber incidents and conduct Root Cause Analysis exercises afterwards.

Contribute to the production of cyber communications for the business.

Conduct internal phishing simulations.

Work alongside the Cyber Lead in conducting IT assurance activities, including arranging third-party assurance such as penetration testing, and conducting internal assurance such as checking EWR's alignment with necessary standards and best practice.

Take responsibility for your own and others' health and safety by adopting and working to EWR Health and Safety principles.

Demonstrate a cost-conscious mindset, keeping taxpayers' money at the forefront of decisions.

Show commitment to innovation by proactively seeking creative solutions to challenges and opportunities.

Act as a role model for EWR's vision and behaviours, working in ways aligned with EWR Ways of Working, and encourage and support others to do so too.

Skills Knowledge and Expertise You will bring:

Essential Criteria A background in cyber security, information security, IT operations, or a closely related discipline, with the ability to apply security principles in a practical business environment.

Experience working within the Microsoft Security Stack, including tools such as Microsoft Defender, Purview, Entra, Sentinel, Intune, or equivalent security technologies.

Practical involvement in investigating and resolving cyber security alerts, incidents, vulnerabilities, or control issues.

A good understanding of common cyber security risks, threats, and controls, including phishing, malware, identity compromise, data loss, access control, and secure configuration.

Ability to document processes, procedures, configurations, decisions and findings clearly and accurately.

Analytical and problem-solving skills, with the ability to investigate issues methodically and draw evidence-based conclusions.

Effective communication skills, with the ability to explain cyber…