AirNav - Cyber Analyst (ICT)

AirNav Ireland seeks to recruit a Cyber Analyst that will assist in the detection, triage, analysis, and response to cyber-attacks. The successful candidate will join our ICT Cyber team, who work with a partner, providing Security Information & Event Management/Security Operations Centre (SIEM /SOC) services.

Join us in evolving our detection and response capabilities to protect AirNav Ireland from the ever evolving and sophisticated global threat actors.

JOB DESCRIPTION:

Job Purpose

The role of the ICT Cyber Analyst is to provide effective and efficient cyber security support for business Information and Communications Technology (ICT) Systems/Infrastructure, including Cloud services. To deliver, within approved timescales and budgets, ICT cyber security strategy, cyber security assessment programme, cyber security compliance (NIST CSF compliance, ICT Policies/Procedures) and co-ordinate Incident Response & Threat Alert mitigations.

Main Duties and Responsibilities

Manage the daily monitoring of threat alerts and co-ordinate and track the associated mitigating factors.
As an ICT Cyber Analyst, you will be responsible for the daily monitoring of threat alerts and co-ordinating & tracking the associated mitigating factors.
Provide incident response and implementation of relevant mitigation controls.
Assist in the implementation of the ICT Cyber Security Strategy.
Work with and provide cyber security support to technical colleagues.
Ensure the application of best practice and security policies to all elements of the ICT service.
Identify and evaluate new and emerging cyber security technologies.
Provide guidance and support for all elements of the network infrastructure such as firewalls, switches, routers, intrusion detection systems, and change control auditing.
Conduct risk assessments to ensure compliance to standards and regulatory requirements.
Ensure that the ICT Information Security Policy is up-to-date and meets all ICT cyber requirements (NIST CSF compliance etc.) and is in accordance with industry best practices.
Provide schedules, time estimates, and detailed project plans and documentation for all deliverables, including risk assessments and opportunities.
Manage and track cyber security related projects, tasks, compliance KPIs.
You will be expected to participate in an on-call arrangement and provide weekend cover, should the need arise.
Other duties assigned, as appropriate.

Contract Management

Assist in the co-ordination of outsourced bodies to ensure that they deliver best in class services and support, while adhering to cyber security policies and compliance.
Assist in the specification and procurement of IT hardware/software and Networks active/ passive components, ensuring that cyber security is a key factor, as required.

Reports To: Manager, Information Technology, or their designate.

Direct Reports: N/A

Relationships

Internal: In addition to direct reporting relationship above the ICT Cyber Analyst is required to liaise with all personnel and Directorates.

External: The ICT Cyber Analyst is required to liaise with all appropriate external bodies, providers, suppliers, and companies.

PERSON SPECIFICATON

Qualifications, Knowledge, Experience & Skills

Essential:

BSc in Computer Science or similar (Cyber security qualification, an advantage).
5+ years in a large (24x7 a plus), government or enterprise environment, with a proven record in both a cyber security and network analyst roles.
Good working knowledge of the NIS1/NIS2 Directives and NIST CSF Compliance Framework.
Excellent communication skills.
Proven record in cyber security compliance and oversight.
Proven ability to prioritise workload and manage expectations under pressure.
Excellent analysis & problem-solving skills.
Proven ability to critically review, analyse and design solutions proposed by security subject matter experts (suppliers/consultants).
Core understanding of Supply Chain Management and security.
Good knowledge of Microsoft products and associated cyber security features.
Excellent understanding of cyber security and associated threat landscape.

Technical

Good understanding of SIEM/SOC principals.
Good networking knowledge, including routers (Cisco), Core switches (Cisco), firewalls and LAN & WAN infrastructure & Protocols (TCP/IP...).
Good working knowledge of Intrusion Detection Systems, Backup Systems (on-premises and cloud based), Business Continuity practices, Technical access controls, Internet services (web site hosting, external mail routing, Firewalls environments...), from a security perspective.
Knowledge of working with monitoring systems such as SolarWinds and IBM QRadar and the associated report configuration and alerts.
Excellent knowledge of compliance systems/tracking.
Good understanding of NIS1/NIS2 Directives (and NIST CSF) compliance and ISO27001.
Good understanding of CLOUD security technologies/services.
Cyber security experience and understanding of the threat landscape, actors and vectors.
Good understanding of the role of the NCSC, GCCB and Eurocontrol.

Desirable:

Experience working in a 24/7, 365 organisation.
ISO 27001 and its application.

Applications (Cover letter & CV), giving full details of experience and suitability for the position, should be emailed to Siobhán Moran, Human Resources Directorate at [email protected] no later than 16:00hrs on Friday 22nd November 2024. Late applications will not be accepted.

AirNav Ireland is an Equal Opportunity Employer

Abbreviations:

ICT: Information and Communications Technology

NIST CSF: National Institute of Standards Cyber Security Framework

NIS: Network and Information Systems (Directive)

NCSC: National Cyber Security Centre (Ireland)

GCCB: Garda (National) Cyber Crime Bureau

SIEM/SOC: Security Information & Event Management/Security Operations Centre

LAN: Local Area Network

WAN: Wide Area Network

TCP/IP: Transmission Control Protocol/Internet Protocol