Cyber Compliance Analyst

This role is integral to the CFG’s Information Security Team which is responsible for protecting, supporting, and maintaining a high level of Information Security across the City Football Group.

This is a high-profile role, covering all aspects of Information and Cyber Security specialising in Compliance and Audit, technical elements, as well as policy risk management.

You will work closely with the wider Technology Department and our Cyber Security Partners, ensuring the delivery of Information Security Services into the Global Group and meeting and confirming the high levels of Information Security is delivered to the highest standards.

The role has a high degree of flexibility, and the right candidate will be able to operate independently, adapting their approach depending on the circumstances of the requirement. They will have to balance ensuring that business operations are secure, without impacting on the ability of the business to operate.

This is Your City

As part of our team, you will be entitled to 26 days annual leave plus an additional day off for your birthday, private healthcare and a simply health cash plan, an annual discretionary bonus, plus a range of partnership and lifestyle discounts.

Your Impact

• Provide audit and compliance support to functional work/project priorities; co-ordinating day-to-day activities and outputs across projects. Acting as a delivery resource on project work streams related to area of specialism; supporting project delivery to time cost and quality standards to ensure the highest levels of Cyber Security Compliance.
• Undertake audits and compliance investigations across the business, either as an individual contributor or as part a small specialist service delivery team. Focus will be on the Clubs, ensuring risk mitigation and Cyber Compliance. Planning is primarily focused across weekly to monthly time horizons to ensure that all Clubs are compliant.
• Influence project outputs through the appliance of cyber security knowledge, and the building of rational arguments, to influence decision making.
• Plan and implement regular reviews of systems, processes, and practices within area of specialism to identify opportunities for improvement considering the changing needs of the Group.
• Define and select the appropriate and corporate service solution from known applications, following a wider range of procedures to deliver across the business
• Outputs will be focused primarily on the delivery of corporate service input onto organisational projects. The role will be working directly into the Director of Information Security, and further professional/technical support is widely available.
• Focus on delivery of business as usual support across all CFG Clubs and Functions, focusing on those that carry the highest risk profile, from an area of a specific corporate service specialism to inform project/organisational decision-making.

What we are looking for

Essential

• A passion for cyber security and a keen interest in IT
• An understanding of the cyber security risks associated with various technologies and ways to manage them
• Analytical and problem-solving skills to identify and assess risks, threats, patterns and trends
• Teamworking skills in order to collaborate with team members and other Functions
• Verbal communication skills, with an ability to communicate with a range of technical and non-technical team members and other relevant individuals
• Good written communication skills, for example to write reports
• Good time-management and organisational skills to manage a variety of tasks and meet deadlines

Desirable

• Good time-management and organisational skills to manage a variety of tasks and meet deadlines
• Ability to multi-task and prioritise your workload
• An ability to work under pressure, particularly when dealing with threats and at times of high demand
• IT / Cyber Security Qualification (eg CISA, OSCP, CISSP, GIAC GCIA, Security+)
• Working knowledge of application & infrastructure security solutions (Firewalls, Intrusion Detection/ Prevention Systems, Network Security, Password Management, Data Encryption, and Access Control)
• Experience in delivering support across multiple locations
• Experience with Microsoft Intune Device Management and Azure Information Rights Management
• Experience of ITIL Foundation v3.

How to Apply

Please click “Apply Now” to begin your application.