Cyber Security Specialist

About the role

The Cyber Security Specialist is the hands‑on focal point for the organisation’s security operations, assurance, incident response and audit programmes. Reporting to the Head of IT, the role works across internal, external, ISO, regulatory and customer audits while partnering with sales, technology, legal and business teams on security assessments and due‑diligence.

Key responsibilities

• Review and improve security monitoring across identity, endpoint, email, cloud, network, applications and critical third‑parties; tune use cases and escalation paths.
• Coordinate XDR/MDR alert triage, validate severity, manage escalations and adjust detection rules based on false positives/negatives.
• Track threat intelligence, convert indicators into practical detections, blocks or communications.
• Oversee asset‑based vulnerability scanning, risk‑based remediation, exception handling and closure validation.
• Maintain security configuration baselines for endpoints, identity, email, cloud, networks and applications.
• Support MFA, least‑privilege, privileged‑access controls, joiner/mover/leaver processes and periodic access reviews.
• Activate and lead incident‑response activities, maintain playbooks, evidence procedures and stakeholder communications.
• Coordinate containment, eradication, recovery and post‑incident reviews, including legal and regulator engagement.
• Own the group‑wide audit and certification programme, managing ISO, regulatory and customer audit readiness, evidence collection and remediation tracking.

Required profile

• Hands‑on expertise in cybersecurity operations and incident response.
• Strong understanding of vulnerability management, security monitoring and threat intelligence.
• Experience coordinating audits, certifications (ISO, regulatory) and interacting with external auditors.
• Ability to work with cross‑functional teams (sales, technology, legal) on security assessments and due‑diligence.
• Commercial judgement to balance security requirements with business objectives.

Required skills

• Security monitoring across identity, endpoint, email, cloud, network and applications.
• XDR/MDR alert triage and tuning.
• Threat intelligence tracking and implementation.
• Vulnerability scanning and remediation management.
• MFA, privileged‑access controls and access‑review processes.
• Incident‑response policy, playbooks and digital forensics evidence handling.
• Audit and certification coordination (ISO, regulatory).