Address
Salary Overview:
Location: UK, Runcorn, Hybrid
Reporting to Global Head of Cyber Defence and Engineering
Closely work with Security Operational Centre to detect, investigate and address insecure features and malicious activities within Swissport networks and infrastructure, report on potential threats. Responsibilities:
Compliance
Information Security Analyst
Location: UK, Runcorn, Hybrid
Reporting to Global Head of Cyber Defence and Engineering
Closely work with Security Operational Centre to detect, investigate and address insecure features and malicious activities within Swissport networks and infrastructure, report on potential threats.
- Contribute to the implementation and enforcement of Swissport Information Security strategy, policy, standards, controls and processes.
- Drive the investigation of compromised accounts and MCAS alerts.
- Investigate on L3 requests/tickets.
- Manage EDR: fine-tune detection rules, monitor and add exclusions where required, investigate open cases, perform incident response.
- Identify threats and conduct risk assessments to address cyber security risks.
- Support Sec Awareness campaigns.
- Ensure Security Awareness training is effective and helps employees to identify and avoid cyber-threats in the workplace. Follow up on incompliance cases.
- Design and deploy Phishing simulation campaigns
- Support inspections, internal and external audits in accordance with Swissport Security policy and standards.
Compliance
- Adhere to Swissport IT and Information Security Policies
- Adhere to any other Swissport non-IT compliance standards
- Adhere to Swissport IT Vendor Management framework
- Ensure deployment of the Corporate QHSE Manual
- Function / Market & Industry Knowledge / Business Acumen / Process working
- Understanding and knowledge of, at least, one Information Security management frameworks, such as ISO/IEC 27001, COBIT and NIST; awareness and understanding of compliance and data protection regulations, such as GDPR
- Understanding of firewalls, proxies, SIEM, antivirus and IDPS concepts
- Background in one or more security technologies and a good awareness of the range of available security solutions
- Bachelor’s degree in cybersecurity
- A professional Information Security certification, such as CISM, CISSP, CISA, CRISC or other
- 1 - 3 years of working experience in positions that include a combination of different areas, such as: network security, email gateway security, cloud security, vulnerability
