Security Business Data Analyst

Hybrid – 3 days onsite - Glasgow

6-Month Contract – Inside IR35 – up to £550 per day

Energy Sector

The role is responsible for the definition, creation, maintenance, reporting, and continual improvement of all business processes involved in supporting IT assets that are in scope for NIS systems. The role supports the IT Security Manager (Infrastructure) in the definition and delivery of any Digital Transformation TPOC business initiatives associated with securing NIS Infrastructure assets across Network, Server, DB, and Client systems.

Key Responsibilities:

• Provides business process design input to the DT TPOC function to ensure that security considerations are embedded by default in all NIS Assets.
• Provide expert input to the DT TPOC Infrastructure Security strategy based on a comprehensive assessment of current infrastructure security posture against NIS compliance target position.
• Assess emerging business risks associated with infrastructure tools and services and support strategies for delivering and enhancing required security controls.
• Support the delivery of a set of business standards to be adopted by DT and work proactively to enable their adoption.
• Conduct investigations into defining the operating models of all security tools (~60 tools) and their associated procedures.
• Definition of control objectives and operational effectiveness for each tool and associated processes.
• Definition of workflows to BPMN standards.
• Investigate technical implementation of the security tool/process and which ISO control and IGP is impacted.
• Conduct risk assessments against NIS assets based upon control effectiveness.
• Define improvements to business processes and create new processes where gaps are identified.
• Create and maintain NIS Security Posture Dashboards based on control testing data.