Protect our customers, unlock your career.

Security Officers at Sodexo are dependable and knowledgeable, ensuring the safety of our clients' employees, buildings, and assets. Working at Doosan,Park House, Manor Royal, Crawley, RH10 9AD, no two days are ever the same, and everything you do has a significant impact in the everyday. Join Sodexo and be part of something greater. You belong in a team where you can act with purpose and thrive in your own way.

What you’ll do:

• Greet staff and visitors and ensure they adhere to the required security protocols
• Monitoring of CCTV, Access Control, and other protective systems
• Act as a first-line response to activations & incidents or fault reporting
• Log and transfer calls, relay messages and provide guidance and advice to visitors, clients, contractors, and staff
• To carry out regular patrols throughout the shift

What you bring:

• Ability to interact with employees, contractors, consultants, visitors, and management as well as local police and fire authorities
• A full current driving license
• Excellent communication and awareness skills
• Experience in working in a similar role
• Knowledge of security techniques and site and local emergency procedures
• An SIA licence is essential

What we offer:

Working with Sodexo is more than a job; it’s a chance to be part of something greater. You’ll belong in a company and team that values you for you; you’ll act with purpose and have an impact through your everyday actions; and you’ll be able to thrive in your own way. In addition, we also offer a range of resources, rewards and benefits for our colleagues and their families:

• Unlimited access to an online platform offering mental health and wellbeing support.
• Employee Assistance Programme to help with everyday issues or larger problems where you may need additional support, including legal and financial advice, support with work related issues or personal issues such as bereavement.
• Access to a free health and wellbeing app that provides rewards for maintaining a healthy lifestyle and includes access to a 24hr virtual GP and various other services.
• The Sodexo Discounts Scheme, offering great deals 24/7 (also open to friends and family) and/or the prepayment cashback card.
• Money Insights and financial benefits via the Salary Finance Platform.
• Save for your future by becoming a member of the Sodexo Retirement Plan
• A Death-in-Service benefit for colleagues who pass away whilst employed by Sodexo
• Opportunities to enable colleagues to grow and succeed throughout their career at Sodexo, including a variety of learning and development tools.
• Cycle to Work Scheme to help colleagues to do their bit for the environment whilst keeping fit.
• Volunteering Opportunities to enable all colleagues to help support worthwhile causes in our communities.
• Flexible and dynamic work environment
• Competitive compensation
• Full training and full protective uniform supplied.

Ready to be part of something greater? Apply today! Secure your career with us.

Sodexo reserves the right to close this advertisement early if we are in receipt of a high volume of applications.

A role where you’re the key to keeping everyone safe.

• 42 hours per week
• Days & Nights 6:00-18:00/18:00-6:00 4 on 4 off
• £11.44 per hour
• Security and reception duties to include CCTV, Mailroom, Patrols, Gatehouse.
• Free parking, access to public transport, accessible location.

SIA license essential

​Check your local transport links here: Plan Your Journey | Traveline - the destination you should input is Manor Royal West

About Sodexo

At Sodexo, our purpose is to create a better every day for everyone to build a better life for all. As the global leader in services that improve the Quality of Life, we operate in 55 countries, serving over 100 million consumers each day through our unique combination of On-Site Food and FM Services, Benefits & Rewards Services and Personal & Home Services.

We are committed to being an inclusive employer. We are a forces friendly employer. We welcome and encourage applications from people with a diverse variety of experiences, backgrounds, and identities. We encourage our employees to get involved with our Employee Networks such as Pride, Sodexo Parents & Carers, Sodexo Disability, Ability network, So Together, Generations and Origins.

We’re a Disability Confident Leader employer. We’re committed to changing attitudes towards disability, and making sure disabled people have the chance to fulfil their aspirations. We run a Disability Confident interview scheme for candidates with disabilities who meet the minimum selection criteria for the job.

Click here to read more about what we do to promote an inclusive culture.

Protect our customers, unlock your career.

Security Officers at Sodexo are dependable and knowledgeable, ensuring the safety of our clients' employees, buildings, and assets. Working at Doosan,Park House, Manor Royal, Crawley, RH10 9AD, no two days are ever the same, and everything you do has a significant impact in the everyday. Join Sodexo and be part of something greater. You belong in a team where you can act with purpose and thrive in your own way.

What you’ll do:

• Greet staff and visitors and ensure they adhere to the required security protocols
• Monitoring of CCTV, Access Control, and other protective systems
• Act as a first-line response to activations & incidents or fault reporting
• Log and transfer calls, relay messages and provide guidance and advice to visitors, clients, contractors, and staff
• To carry out regular patrols throughout the shift

What you bring:

• Ability to interact with employees, contractors, consultants, visitors, and management as well as local police and fire authorities
• A full current driving license
• Excellent communication and awareness skills
• Experience in working in a similar role
• Knowledge of security techniques and site and local emergency procedures
• An SIA licence is desirable but not essential

What we offer:

Working with Sodexo is more than a job; it’s a chance to be part of something greater. You’ll belong in a company and team that values you for you; you’ll act with purpose and have an impact through your everyday actions; and you’ll be able to thrive in your own way. In addition, we also offer a range of resources, rewards and benefits for our colleagues and their families:

• Unlimited access to an online platform offering mental health and wellbeing support.
• Employee Assistance Programme to help with everyday issues or larger problems where you may need additional support, including legal and financial advice, support with work related issues or personal issues such as bereavement.
• Access to a free health and wellbeing app that provides rewards for maintaining a healthy lifestyle and includes access to a 24hr virtual GP and various other services.
• The Sodexo Discounts Scheme, offering great deals 24/7 (also open to friends and family) and/or the prepayment cashback card.
• Money Insights and financial benefits via the Salary Finance Platform.
• Save for your future by becoming a member of the Sodexo Retirement Plan
• A Death-in-Service benefit for colleagues who pass away whilst employed by Sodexo
• Opportunities to enable colleagues to grow and succeed throughout their career at Sodexo, including a variety of learning and development tools.
• Cycle to Work Scheme to help colleagues to do their bit for the environment whilst keeping fit.
• Volunteering Opportunities to enable all colleagues to help support worthwhile causes in our communities.
• Flexible and dynamic work environment
• Competitive compensation
• Full training and full protective uniform supplied.

Ready to be part of something greater? Apply today! Secure your career with us.

Sodexo reserves the right to close this advertisement early if we are in receipt of a high volume of applications.

A role where you’re the key to keeping everyone safe.

• 42 hours per week
• Days & Nights 6:00-18:00/18:00-6:00 4 on 4 off
• £11.44 per hour
• Security and reception duties to include CCTV, Mailroom, Patrols, Gatehouse.
• Free parking, access to public transport, accessible location.

​Check your local transport links here: Plan Your Journey | Traveline - the destination you should input is Manor Royal West

About Sodexo

At Sodexo, our purpose is to create a better every day for everyone to build a better life for all. As the global leader in services that improve the Quality of Life, we operate in 55 countries, serving over 100 million consumers each day through our unique combination of On-Site Food and FM Services, Benefits & Rewards Services and Personal & Home Services.

We are committed to being an inclusive employer. We are a forces friendly employer. We welcome and encourage applications from people with a diverse variety of experiences, backgrounds, and identities. We encourage our employees to get involved with our Employee Networks such as Pride, Sodexo Parents & Carers, Sodexo Disability, Ability network, So Together, Generations and Origins.

We’re a Disability Confident Leader employer. We’re committed to changing attitudes towards disability, and making sure disabled people have the chance to fulfil their aspirations. We run a Disability Confident interview scheme for candidates with disabilities who meet the minimum selection criteria for the job.

Click here to read more about what we do to promote an inclusive culture.

SOC (Security Operations Centre) Level 3 Analyst

Reference Number - 79158

This SOC (Security Operations Centre) Level 3 Analyst position will report to the Cyber Security Operations Manager and will work within the Information Systems directorate based in our Crawley or Ipswich office. You will be a permanent employee.

You will attract a salary of £75,000.00 and a bonus of 7.5%. This role can also offer blended working after probationary period (6 months) - 3 days in the office and 2 remote

Close Date: 16/09/2024

We also provide the following additional benefits

• Annual Leave
• Personal Pension Plan - Personal contribution rates of 4% or 5% (UK Power Networks will make a corresponding contribution of 8% or 10%)
• Tenancy Loan Deposit scheme
• Tax efficient benefits: cycle to work scheme
• Season ticket loan
• Occupational Health support
• Switched On - scheme providing discount on hundreds of retailers products.

DIMENSIONS:

• People -Work collaboratively in a team of circa 14 permanent and temporary cyber security operations staff. Mentor Level 1 and Level 2 SOC Analysts, providing guidance and training.
• Suppliers - regular interaction with technical resources provided by the outsourced Cyber Security Managed Service provider and cyber security tooling vendors.

Principle Responsibilities:

1. Advanced Threat Hunting: analyse and assess multiple/complex threat intelligence sources and indicators of compromise (IOC) to identify new threat patterns, vulnerabilities and anomalies and, using this intelligence information and the available tooling, search the UKPN environment to find and remove 'hidden' threats, which may have initially evaded our detective controls defences.
2. Policy Development: develop and create SOC policies, technical standards and procedure documentation in consideration of current industry best practice.
3. Log Management: work with our MSSP and service owners to ensure onboarding of all log sources into the SIEM solution, create alert use cases to correlate suspicious activities across assets (endpoints, network, applications) and environments (on-premises, cloud) to identify patterns of anomalous activity.
4. Incident Response: improve security incident response playbooks and processes, lead the response to escalated security alerts and events and high-severity security incidents, provide senior level response activities such as incident tracking, communication with partners, overseeing remediation and recovery actions, reporting and applying root cause analysis and lessons.
5. Security Orchestration, Automation, and Response (SOAR): support and develop UKPN's SOAR platform, produce new workflows for automation using SOAR tools, automating our response to common attack types and enhancing operational playbooks to allow efficient correlation and enrichment of security events.
6. Digital Forensics: identify, analyse and report on serious cyber security incidents. Using experience combined with industry tools and techniques, perform forensic analysis against information gathered from multiple data sources (endpoint event logs, SIEM data, dashboards, enterprise applications, network traffic patterns), and present consistent and reasoned action and response activities to ensure threats are contained and eradicated from UKPN's network systems.
7. Cyber Crisis Scenario Testing: participate in regular cyber-attack simulation exercises to test the organisation's resilience to cyber threats and improve its cyber defences and attack preparedness.

Qualifications:

• Considerable experience (commensurate to that of a subject matter expert) in a SOC Level 2 or 3 role with evidence of advanced threat hunting and incident response.
• Must have specific SOC training or qualification or academic equivalent such as bachelor's degree in the field of Computer Science, Cybersecurity and IT, or related subject.
• Ideally hold an industry recognised information security qualification such as CISSP, AZ-500, including knowledge of industry best-practice GIAC/GCIA/GCIH, or CompTIA Advanced Security Practitioner (CASP+), Certified Ethical Hacker (CEH) and/or SIEM-specific training and certification.
• Experience or knowledge in log correlation and analysis, including chain of custody and forensics investigations and requirements.
• An understanding of compliance and regulatory frameworks such as National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF) and SO/IEC 27001/27002, GDPR, CIS, NIST.
• Working knowledge of security technologies including SIEM, SOAR, EDR, /AV, IDS/IPS, NAC, AD, DLP, Web Filtering, Email Filtering, Behavioural Analytics, TCP/IP Protocols, network analysis, and network/security applications.
• Detailed knowledge of SIEM and SOAR solutions, Identity and Access Management and Data Loss Prevention technologies preferably including FortiSIEM, Q-Radar, McAfee Web Gateway, McAfee ePolicy Orchestrator, Darktrace and Microsoft Defender. Microsoft Sentinel experience an advantage.

About us...

Connected to Gatwick South terminal, Hilton London Gatwick has 821 bedrooms and an exciting selection of restaurants and bars, including a Japanese Steakhouse. The hotel has a fitness center and 23 meeting rooms that can host large conferences.

A bit about what you will do...

Our Cluster Safety & Security Manager will perform hotel security duties and follow procedures to ensure the safety and security of guests, employees and the property. You will oversee this department for all our hotels in the Gatwick area.

• Safeguard and maintain the security of the hotel premises, car parks, its’ guests, staff and visitors along with all property contained within.
• Manage the day to day running of the security department and support all other hotel departments.
• To remain flexible to cover security department rota changes including holidays, i.e. slotting in to the night shift etc.
• Train all members of the team in the correct systems of work, policies and procedures. To manage and monitor all work carried out.
• Within the constraints of the law and company policy, to stop, search, and detain those committing offences against the company within the complex.
• Sign police charge sheets on behalf of the company and attend court as prosecutor on behalf of the company.

More about you...

• Passionate about guest experience, with real passion for hospitality
• You will be obsessed about standards, and ensuring the safety of guests and employees
• Previous experience as a Safety & Security Manager in a hotel would be beneficial but not essential
• You are a leader who strives to develop and motivate the reception team
• SIA Licensed, First Aid At work training, and NEBOSH accreditation are highly desirable.

What’s in it for you…

Competitive salary

Holiday – 28 days holiday, enhanced after 5 years of service.

But there’s more...

• Free meals on duty.
• Discounted employee friends & family rates at Arora Hotels.
• Food and beverage discounts.
• Christmas gifts and employee parties.
• Introduce a friend scheme.
• Cycle 2 work scheme.
• UK attraction discounts @ Merlin Entertainments.
• Taste card.
• Life assurance scheme.
• Wage stream.
• Employee assistance programme.
• Arora star employee recognition.
• Long service recognition award.

Grow with us...

We are growing rapidly and with growth comes advancement opportunities. Being part of the Arora group there are exciting opportunities for career progression and development across our properties and brands.

The Hilton London Gatwick is part of the Arora Group. Our company is focused on our people, promoting diversity and friendly work environment. With more than 70 languages spoken, we created a culture of excellence for all our employees.

Cluster Security Health and Safety Manager

We treat our people like family and our guest like royalty!

We are looking for a Cluster Safety & Security Manager who will represent our brand by delivering and exceeding our guest expectations.

Our Safety & Security Manager will perform hotel security duties and follow procedures to ensure the safety and security of guests, employees and the property.

What we are looking for:

• You will be passionate about guest experience, with real passion for hospitality
• You will be obsessed about standards, and ensuring the safety of guests and employees
• Previous experience as a Safety & Security Manager in a hotel would be beneficial but not essential
• You are a leader who strives to develop and motivate the reception team
• SIA Licensed, First Aid At work training, and NEBOSH accreditation are highly desirable.

Duties & Responsibilties:

• To safeguard and maintain the security of the hotel premises, car parks, its’ guests, staff and visitors along with all property contained within.
• To manage the day to day running of the security department and support all other hotel departments.
• To remain flexible to cover security department rota changes including holidays, i.e. slotting in to the night shift etc.
• To train all members of the team in the correct systems of work, policies and procedures. To manage and monitor all work carried out.
• Within the constraints of the law and company policy, to stop, search, and detain those committing offences against the company within the complex.
• To sign police charge sheets on behalf of the company and attend court as prosecutor on behalf of the company.

What do we offer:

Our Safety & Security Manager receive some excellent Company benefits:

• A competitive salary + Bonus
• 28 days paid holiday with an extra 5 days, following 5 years’ service
• Discounted hotel room rates across our hotels, for you and friends and family
• Fantastic Training and Development opportunities
• Uniform and Complimentary Dry Cleaning
• Free Meals on shift
• Pension cover
• Unrivalled Career Progression prospects

Apply now to be our new Cluster Safety & Security Manager!

Cyber Security Portfolio Lead

Reference Number - 78716

This Cyber Security Portfolio Lead will report to the Head of Cyber Security and Technology Risk and will work within the Information Systems directorate based in either our Crawley, London or Ipswich office. You will be a permanent employee.

You will attract a salary of £80,000.00 and a bonus of 10%. This role can also offer blended working after probationary period (6 months) - 3 days in the office and 2 remote

Close Date: 07/07/2024

We also provide the following additional benefits

• Annual Leave
• Personal Pension Plan - Personal contribution rates of 4% or 5% (UK Power Networks will make a corresponding contribution of 8% or 10%)
• Tenancy Loan Deposit scheme
• Tax efficient benefits: cycle to work scheme
• Season ticket loan
• Occupational Health support
• Switched On - scheme providing discount on hundreds of retailers products.
• Discounted access to sports and social clubs
• Employee Assistance Programme.

JOB PURPOSE:

You will be responsible for the development and management of a large portfolio of projects and programmes that are delivering enhanced cyber security technology, process and organisational change against a defined, UK Power Networks (UKPN) multi-year strategy.

DIMENSIONS:

• People - manage resources assigned to deliver projects will vary, as a minimum you will have direct management of circa 9+ permanent and temporary project resources which could rise to over 25 at peak project demand.
• Financial - shared responsibility for £1-3m annual budget covering permanent resources, tools and professional services, with governance and oversight responsibility for project/ programme budgets of approximately £80m over a 3-5 year time horizon.
• Communication - business-fluent written and spoken English language skills. Excellent verbal, written, and presentational skills to effectively synthesize and tailor communication of technically complex issues to various audiences to provide timely, balanced insights into and assurance on the health of the portfolio.
• Planning and Organisation: drive cohesion across the portfolio, identifying shared objectives, potential conflicts and common risks and work with project teams to design plans for optimizing outcomes across the portfolio. collaborating with senior partners on the prioritization of portfolio, tracking the scope, budget, and enforcing r

PRINCIPAL ACCOUNTABILITIES:

1. Transform the UKPN Cyber Security Strategy and strategic objectives into an aligned cyber security portfolio of programs, working with the Cyber Security Architecture Manager to develop the cyber security roadmap, and the Cyber Security Governance Manager on control remediation plans and assigning to teams to build and deliver the expected benefits and cyber security capability and control enhancements to the organisation.
2. Define controls and standards for projects to ensure the health of the portfolio is maintained with management of budgets, resources, risks and scope.
3. Develop portfolio-level performance metrics and provide senior management with regular, accurate management information on the portfolio status and against measurements.
4. Manage the Cyber Security Portfolio team, to ensure the quality and timeliness of services and deliverables to meet our requirements, reviewing performance and driving continuous improvement of the cyber security portfolio capabilities.
5. Collaborate with senior leaders, technical subject matter experts, operational teams and portfolio governance personnel to address issues and risks threatening the outcomes of the projects and to ensure the smooth transition of the new services into BAU operational management.
6. Accountable for the full cyber security project lifecycle, from initiation to completion, ensuring all project work for projects is delivered to agreed deadlines/schedule, meeting business objectives and financial targets.
7. Support Project Managers and Program Managers during the analysis and planning stages, driving adherence to processes, procedures, methods, and standards for program delivery.
8. Lead activities required for the realisation of the benefits of each part of the change programme, ensuring understanding of expected benefits.
9. Provide leadership to project teams, promote the adoption of industry best practice project management principles, methods and tools, govern the change control process, and assess and manage complex and material project risks.

NATURE AND SCOPE:

The Information Systems Department works across UK Power Networks, supporting us in the achievement of our vision to become the best performing DNO. The team achieve this through the provision of technology solutions and the optimisation of current solutions to improve how we operate. Continuous improvement, customer service and seamless delivery is at the heart of this ethos and are therefore strongly underpinned by effective cyber security.

You will oversee the delivery of UKPN's Cyber Security Resilience programme and project portfolio.

The Cyber Security Programme Manager will manage the cyber security roadmap across the organisation. We ask that you understand programme and portfolio management concepts, technologies, and best practices, and the ability to collaborate with other teams. You will be committed to delivering high-quality security projects that result in tangible risk reduction. You will have a track record in delivering cyber security change and transformation within critical national infrastructure or the energy-industry.

The Cyber Security Portfolio Manager's has five main functions/services.

1. Portfolio Leadership: Create clear, coherent approaches to guide effective program/project setup, execution, and control. Define a comprehensive portfolio plan, defining clear objectives, deliverables, budgets, and resource allocation. Conduct regular risk assessments and implement mitigation strategies to manage potential threats and challenges. Monitor program progress, identify potential roadblocks, and proactively initiate corrective actions. Maintain communication channels with partners, ensuring updates and transparent status reporting and progress. Operate controls and reporting standards for projects within the portfolio.
2. Value and Benefit Realisation - identify important value drivers and define metrics to monitor portfolio performance. Establish robust budget management across the portfolio and working with Finance and project teams to forecast, track, escalate and report. Support activities required for the realisation of the projected benefits of each part of the program, to deliver committed results.
3. Risk Management - identification, investigation, resolution and escalation of program issues and risks impacting project delivery to the appropriate senior partners; ensure mitigation strategies are executed.
4. Programme Management Office (PMO) - Ensuring implementation of common PMO standards, reporting, and closure process across programs. Coordinate and report programme and portfolio health, financial tracking and reporting, trend analysis for plan and budget including annual planning, quarterly/monthly forecasts.
5. CISO Office Administration - management and administration of the cyber security budget, supplier and contract management, function performance reporting, organise and coordinate team meetings and events, monitor staff development requirements. drive continuous improvement culture, govern documentation and knowledge management, training and compliance administration, recruitment and onboarding administration etc.

Your principal challenge is to translate the UKPN Cyber Security Strategy and strategic objectives into a multifaceted roadmap of tactical programs to deliver the required services, products and systems with the expected level of quality, and to the agreed schedule and cost.

SKILLS, QUALIFICATIONS AND EXPERIENCE:

• Bachelor's degree in computer science, management or Information Systems or relevant field.
• 7 years of experience managing large-scale cyber security programmes delivering all aspects of cyber security transformation - including technology, processes, and culture.
• Hold an industry recognised Project, Program, and/or Portfolio Management certification such as Portfolio Management Professional (PfMP), Program Management Professional (PgMP), Managing Successful Programmes (MSP), Project Management professional (PMP).
• Hands on experience managing programme management concepts such as resource allocation, programme/project budgets, risk management, benefits tracking, programme assurance.
• Excellent experience in leading the implementation of cyber security technologies and capabilities - including Security Operations, SIEM platforms, PAM, Vulnerability Management
• equal employment opportunity regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace.

Senior Cyber Security (GRC) Analyst

Reference Number - 79076

This Senior Cyber Security (GRC) Analyst will report to the Cyber Security Governance, Risk & Compliance Manager and will work within Information Systems based in either our Crawley or London office. You will be a permanent employee.

You will attract a salary of £55,000.00 and a bonus of 7.5%. This role can also offer blended working after probationary period (6 months) - 3 days in the office and 2 remote

Close Date: 23/06/2024

We also provide the following additional benefits

• Annual Leave
• Personal Pension Plan - Personal contribution rates of 4% or 5% (UK Power Networks will make a corresponding contribution of 8% or 10%)
• Tenancy Loan Deposit scheme
• Tax efficient benefits: cycle to work scheme
• Season ticket loan
• Occupational Health support
• Switched On - scheme providing discount on hundreds of retailers products.
• Discounted access to sports and social clubs
• Employee Assistance Programme.

JOB PURPOSE:

You will will support the Cyber Security GRC Manager in developing IT governance, risk management, and compliance strategies across UK Power Networks information systems, applications and users to safeguard essential business services and operations from cyber threats.

DIMENSIONS:

• People - Work collaboratively in a team of circa 8-10 permanent and temporary GRC resources and specialist 3rd Party GRC service providers. Mentor less experienced GRC analysts, providing guidance and training.
• Financial - no direct budget responsibility.
• Industry and Regulatory - deputise for the GRC manager to represent UKPN in energy sector industry forums and regulatory working groups, working collaboratively with Ofgem and the Department for Energy Security and Net Zero
• Communication - collaborate with all teams and partners in UK Power Networks. Good verbal, written, and presentational skills to articulate risks and the potential possible effects to the business and make reasoned recommendations for management action to mitigate or reduce the risks.
• Partners - regular and ongoing interaction with senior management partners across IT, IS and the Business; collaborate with internal support teams, internal and external auditors, specialist 3rd party service providers and partners to manage IT risk, and to monitor mitigation plans and actions.

PRINCIPAL ACCOUNTABILITIES:

1. Risk Management: Conduct cyber security risk assessments following the UK Power Networks risk assessment framework and methodology, identifying and explaining findings and treatment actions to important partners. Ensure all risks relating to the control environment are captured and remediation actions defined, tracked, monitored and followed-up with owners including communication of third-party assessments and actions.
2. Reporting: Produce management information related to the risk and control environment. Support IS teams to define important control metrics to demonstrate their effectiveness. Prepare regulatory submissions and provide assurance for UK Power Networks policy compliance within IT which includes key performance metrics and management reporting.
3. Information Security Management System Support: Operate and maintain the information security management system and artefacts, in compliance with ISO 27001/27002 including the governance forum agenda and minutes.
4. Policies and Standards: develop GRC policies, standards and procedures to monitor UKPN information security controls, exceptions, risks, and testing including management reporting on performance.
5. Controls Framework: Ensure a fit for purpose IT control environment and support a roadmap for IT controls improvements. Requiring an understanding of technical issues and controls.
6. Compliance: Design, implement, and run processes to monitor UKPN IT compliance to legal and regulatory requirements such as Smart Energy Code, Cyber Essentials, National Cyber Security Centre (NCSC) Networks & Information Systems (NIS) Regulations Cyber Assessment Framework (CAF) and all IT related audits (internal and external) where the scope is wholly relevant to the companies cyber security controls.
7. Business Continuity and Disaster Recovery:Manage IT resilience and business continuity plans, plan, coordinate test exercises. Conduct business continuity reviews and evaluate resilience and business continuity activities.
8. GRC Systems and Tools Support: support the technical implementation, maintenance and configuration of the suite of GRC tools, products and systems to ensure effective operation of GRC frameworks and capabilities.
9. Stakeholder Management: Engage and work with important partners across IT, IS and the Business, maintaining daily working relationships with internal and external support teams, internal and external auditors, UKPN regulator Ofgem, third party managed service providers and partners to manage all IT risks across the enterprise.
10. Supply Chain and 3rd Party:Engage, interact and ensure 3rd party supplies are meeting cyber security expectations. Gather evidence and assurance, risk assess and create reports and governance metrics for measuring the ongoing risk and effect that 3rd party suppliers present to UKPN.

NATURE AND SCOPE:

The Information Systems Department works across UK Power Networks, supporting us in the achievement of our vision to maintain its position as best DNO. The team achieve this through the provision of technology solutions and the optimisation of current solutions to improve how we operate. Continuous improvement, customer service and seamless delivery is at the heart of this ethos and are therefore strongly underpinned by effective cyber security.

You will support all other team members, the rest of Information Systems teams, IT Service Providers and partners across UK Power Networks to implement and improve IS and IT risk management and operational control capabilities that are important to safeguarding UKPN information assets, business services and operations.

• We ask that you understand governance, risk management, and compliance principles, in addition to knowledge of relevant laws, regulations, and industry standards. We ask that you have a detailed knowledge and practical expertise in at least 3 of the following specialist areas: -
• Specific Industry Standards
• IS/IT Operational Controls and Governance
• IT/IS Risk Management
• Business Continuity Planning and Disaster Recovery
• Supply Chain and 3rd Party Risk Management
• You will have problem solving skills to recommend pragmatic mitigating solutions to mitigate IT risks across the organisation; must also be able to develop and implement new governance and compliance strategies and practices.

Qualifications:

• Practical experience in a GRC role or related profession e.g. risk, audit, cyber security or similar practical experience in IT or OT role with a desire to move into cyber security, must have some relevant training of cyber security risk assessment.
• Detailed knowledge and experienced in defining, implementing, operating maintaining, and improving information security management systems (ISMS).
• Experience of internal and external audit engagements, orchestrating and delivering cyber security risk and control assessments and knowledge of risk processes, frameworks, and procedures.
• Specific GRC related professional training or an academic level equivalent in a related subject with a recognised information security related certification e.g. CISSP, CompTIA, CISA, CISM, CRISC, MSc Information Security, degree or other formal technical qualifications e.g. apprenticeship, in a related area e.g. networking, cyber security, Information Technology, Operational Technology.
• Knowledge of compliance, security and regulatory frameworks such as Cyber Essentials, Smart Energy Code (SEC), Network and Information Systems Directive (NIS) National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF), ISA/IEC 62443, ISO/IEC 27001/27002, GDPR, Cloud Security Alliance (CSA) Star framework, SOC2 Type 2 audits. Information Technology Infrastructure Library (ITIL), Control Goals for Information and Related Technologies (CoBIT).
• IT / OT operational risks and controls assessment and assurance
• Business Continuity Planning and Disaster Recovery testing assurance.
• 3rd Party Supply chain risks, controls and assurance.
• Experience with technical risk assessments in either Information Technology (IT) or Operational Technology (OT) environments, including Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA).
• Working within a regulated environment, preferably Energy sector Critical National Infrastructure (CNI) and an understanding of power distribution systems or industry best practice would be beneficial.

SOC (Security Operations Centre) Level 3 Analyst

Reference Number - 79158

This SOC (Security Operations Centre) Level 3 Analyst position will report to the Cyber Security Operations Manager and will work within the Information Systems directorate based in our Crawley or Ipswich office. You will be a permanent employee.

You will attract a salary of £65,000.00 and a bonus of 7.5%. This role can also offer blended working after probationary period (6 months) - 3 days in the office and 2 remote

Close Date: 23/06/2024

We also provide the following additional benefits

• Annual Leave
• Personal Pension Plan - Personal contribution rates of 4% or 5% (UK Power Networks will make a corresponding contribution of 8% or 10%)
• Tenancy Loan Deposit scheme
• Tax efficient benefits: cycle to work scheme
• Season ticket loan
• Occupational Health support
• Switched On - scheme providing discount on hundreds of retailers products.
• Discounted access to sports and social clubs
• Employee Assistance Programme.

JOB PURPOSE:

The role of a Security Operations Centre (SOC) Level 3 Analyst is to respond to high-severity cyber security incidents and escalated events and alerts then, using experience combined with industry tools and techniques, expediate a containment, eradication and recovery strategy to minimise business impact and ensure UK Power Networks' (UKPN) network systems and customer data are protected from cyber threats.

DIMENSIONS:

• People -Work collaboratively in a team of circa 14 permanent and temporary cyber security operations staff. Mentor Level 1 and Level 2 SOC Analysts, providing guidance and training.
• Suppliers - regular interaction with technical resources provided by the outsourced Cyber Security Managed Service provider and cyber security tooling vendors.
• Verbal, written and presentational skills with the ability to articulate technical cyber security concepts to technical and non-technical colleagues across different levels of seniority so that they understand the situation, and the associated risk to UK Power Networks.
• Stakeholders - Establish and maintain collaborative working relationships with internal and external technology teams and third party providers, suppliers, and partners to improve outcomes and create agreement around a course of action.

Principle Responsibilities:

1. Advanced Threat Hunting: analyse and assess multiple/complex threat intelligence sources and indicators of compromise (IOC) to identify new threat patterns, vulnerabilities and anomalies and, using this intelligence information and the available tooling, search the UKPN environment to find and remove 'hidden' threats, which may have initially evaded our detective controls defences.
2. Policy Development:develop and create SOC policies, technical standards and procedure documentation in consideration of current industry best practice.
3. Log Management:work with our MSSP and service owners to ensure onboarding of all log sources into the SIEM solution, create alert use cases to correlate suspicious activities across assets (endpoints, network, applications) and environments (on-premises, cloud) to identify patterns of anomalous activity.
4. Incident Response:improve security incident response playbooks and processes, lead the response to escalated security alerts and events and high-severity security incidents, provide senior level response activities such as incident tracking, communication with partners, overseeing remediation and recovery actions, reporting and applying root cause analysis and lessons.
5. Security Orchestration, Automation, and Response (SOAR): support and develop UKPN's SOAR platform, produce new workflows for automation using SOAR tools, automating our response to common attack types and enhancing operational playbooks to allow efficient correlation and enrichment of security events.
6. Digital Forensics:identify, analyse and report on serious cyber security incidents. Using experience combined with industry tools and techniques, perform forensic analysis against information gathered from multiple data sources (endpoint event logs, SIEM data, dashboards, enterprise applications, network traffic patterns), and present consistent and reasoned action and response activities to ensure threats are contained and eradicated from UKPN's network systems.
7. Cyber Crisis Scenario Testing: participate in regular cyber-attack simulation exercises to test the organisation's resilience to cyber threats and improve its cyber defences and attack preparedness.
8. Reporting:promote the continuous improvement of the security operations' reporting capability, including the creation and support of a reporting dashboard and the development of important security and performance metrics.
9. Security Systems and Tools Support:support the technical implementation, maintenance and configuration of the suite of security tools, products and systems to help effective prevention, detection and response to cyber threats.
10. Audit: Participate in security audits (SOC Type II and ISO 27001) and work with internal and external partners to ensure compliance with relevant regulations and standards.
11. Continuous Improvement:develop creative solutions to automate security event monitoring, detection and response, review security event/alert use cases and log correlation to propose enhancements following the changing threat landscape.

NATURE AND SCOPE:

The Information Systems Department works across UK Power Networks, supporting us in the achievement of our vision to become the best performing DNO. The team achieve this through the provision of technology solutions and the optimisation of current solutions to improve how we operate. Continuous improvement, customer service and seamless delivery is at the heart of this ethos and are therefore strongly underpinned by effective cyber security.

You will support all other team members, the rest of Information Systems team, IT Service Providers and partners across UK Power Networks to implement and improve cyber security operations capabilities.

The main measure of success for this role is upholding the IT and organisational resilience of UK Power Networks concerning cyber threats and incidents.

Qualifications:

• Considerable experience (commensurate to that of a subject matter expert) in a SOC Level 2 or 3 role with evidence of advanced threat hunting and incident response.
• Specific SOC training or qualification or academic equivalent such as bachelor's degree in the field of Computer Science, Cybersecurity and IT, or related subject.
• Hold an industry recognised information security qualification such as CISSP, AZ-500, including knowledge of industry best-practice GIAC/GCIA/GCIH, or CompTIA Advanced Security Practitioner (CASP+), Certified Ethical Hacker (CEH) and/or SIEM-specific training and certification.
• Experience or knowledge in log correlation and analysis, including chain of custody and forensics investigations and requirements.
• An understanding of compliance and regulatory frameworks such as National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF) and SO/IEC 27001/27002, GDPR, CIS, NIST.
• Working knowledge of security technologies including SIEM, SOAR, EDR, /AV, IDS/IPS, NAC, AD, DLP, Web Filtering, Email Filtering, Behavioural Analytics, TCP/IP Protocols, network analysis, and network/security applications.
• Knowledge of adversarial tactics, techniques, procedures (TTPs) and industry standard frameworks (e.g. Mitre ATT&CK).
• Detailed knowledge of SIEM and SOAR solutions, Identity and Access Management and Data Loss Prevention technologies preferably including FortiSIEM, Q-Radar, McAfee Web Gateway, McAfee ePolicy Orchestrator, Darktrace and Microsoft Defender. Microsoft Sentinel experience an advantage.
• Practical experience of developing incident response playbooks/processes, Security Orchestration, Automation and Response (SOAR), red-team exercises and tabletop crisis war games.
• Experience with security architecture and experience in investigating complex security breaches and network intrusions (e.g. state-sponsored groups or targeted ransomware attacks).

We are committed to equal employment opportunity regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace.

Deputy Site Security Manager - (R0227114)

Based: Crawley

Are you looking to build your career as a security professional?  Do you want the opportunity to work within a highly regarded team that will support with your learning and development? Then look no further…

About the role:

We have a fantastic opportunity for a Deputy Site Security Manager to join our team in Crawley.  As Deputy Site Security Manager, you’ll be responsible for supporting the Site Security Manager with the daily security operations and administration of our Crawley site as well as security assistance to other Thales UK sites.

Key responsibilities

Reporting to the Site Security Manager, on a day-to-day basis you’ll be involved in:

• Delivering the efficient and effective co-ordination and execution of the site security operation in the areas of physical, material, document, personnel and information security, deputising for the Site Security Manager during periods of holiday.

• Ensure Sites FSC certification, and HMG accreditations remain valid, by undertaking any security related tasking issued by Site Security Manager / CSO Senior team. 

• Support the Site Security Manager in the delivery of the Security Roadmap, Strategies and future security initiatives, ensuring all reviews and work streams are completed to agreed timescales and to an adequate standard.

• Undertake all Security related tasks as directed by Site Security Manager / CSO senior team

• Report all suspected security breaches and if required, carry out thorough investigations of any suspected security breaches making recommendations for appropriate actions

• Escalating security issues directly to the Site Security Manager in the first instance, ensuring coms to and from site are controlled.

• Complete Protective Security Advisory Visits (PSAV) provide Site Security Manager with reports clearly defining outcomes and recommendations, adding recommendations to the Forward Action Plan (FAP)

• Implementing policies and processes in accordance with corporate governance in relation to security as defined in Chorus referential system

• Manage and Maintaining the site security risk register, Secure document remediation plan, Monthly LSC KPI’s and FAP

• Providing advice to, PSO’s, IAOs and employees on security matters including Security Grading Guides (SGG) incoming and flow down SAL’s and the F1686 process

• Communicate information management and security awareness campaigns to all employees and contracted staff.

• Attend site meetings and report to Site Security Manager outcomes and requirements

• Promote awareness of the latest HMG and company security requirements and implementation as necessary

• Support site security and CSO teams with routine security office administrative activities, to ensure continuing compliance with HMG, MoD and Thales UK policies.

• Manage and Maintain RFV,/ IVCO process, work with Mitie to ensure visitors to RED areas are appropriately identified and cleared, produce KPI and metrics

• To act as Crypto Custodian/Alternate, complete assurance reviews and audits

• Run and maintain the Sites security internal assurance regime.

• Matrix line management responsibility.

About you

Ideally, you’ll:

• Be able to demonstrate relevant experience working in a similar security related role/environment OR have an interest in developing your career in this area

• Have knowledge and understanding of List X(FSC) and the UK MoD cryptographic procedures.

• Experience working as a Crypto Custodian/Alternate or possess equivalent certification/qualification in Security.

• Possess good organisational, communication, presentation and report writing skill

• Have experience of building relationships with customers, partners, suppliers and internal stakeholders at all levels

• Be a self-starter with a positive attitude combined with excellent interpersonal and motivational skills

#LI-SB1

In line with Thales' Baseline Security requirements, candidates will be asked to provide evidence of identity, eligibility to work in the UK and employment and/or education history for up to three years. Some vacancies may require full Security Clearance which can require further evidence to be provided. For further details of the evidence required to apply for Baseline and Security Clearance please refer to the Defence Business Services National Security Vetting (DBS NSV) Agency.

At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working.

Thales UK is committed to providing an inclusive and barrier-free recruitment process. We will provide reasonable adjustments and support to ensure neuro-diverse applicants or those with a disability or long-term condition can be their best during the recruitment process. To request an adjustment, if you need this job advert in an alternative format or if you have any questions about the recruitment process, please contact Resourcing Ops for mid to senior roles, or the Early Careers Team for graduate and apprentice roles.

Great journeys start here, apply now!