Cyber GRC / Configuration Management Analyst

Sword group; Aberdeen City; On-site; GBP 40,000 - 55,000; Full time

Job summary

A technology services company in Aberdeen is seeking a Cyber GRC / Configuration Management Analyst to develop and implement a Configuration Management Plan aligned with NIST standards. This position requires knowledge of Cyber Security policies, strong documentation skills, and the ability to communicate complex concepts simply. The role offers a competitive salary and comprehensive benefits, including personalized career development plans and flexible working arrangements.

Benefits

Personalised Career Development

Flexible working

Generous annual leave

Enhanced family-friendly benefits

Qualifications

• Experience writing cyber security policies and procedures.
• Ability to understand process flows and RACIs.
• Collaborate with Communications teams to rollout new processes.

Responsibilities

• Develop and document a Configuration Management Plan in alignment with NIST SP 800-128.
• Roll out the Configuration Management Plan, including communication.
• Define an Approved Software List for RedHat Linux.

Skills

Experience with Cyber Security standards such as ISO27001 or NIST SP 800-53

Knowledge of Secure Configuration and Cyber Security Policy

Document writing skills

Ability to distil complex security concepts into simple language

Job description

Cyber GRC / Configuration Management Analyst

Sword Group is seeking a Cyber GRC / Configuration Management Analyst. This role focuses on developing and documenting a Configuration Management Plan aligned with NIST SP 800-128, defining roles and responsibilities for the 2nd Line of Defense, and coordinating the rollout and ongoing management of the plan.

Responsibilities

• Develop and document a Configuration Management Plan in alignment with NIST SP 800-128
• Document the 2nd Line of Defence roles and responsibilities within the Configuration Management Plan
• Roll out the Configuration Management Plan, including communication and assignment of responsibilities
• Document Secure Configuration Policy Level Statements to define overarching secure configuration principles, including review and communication
• Document all existing Configuration Compliance tooling
• Gather Configuration Compliance reports from monitoring tools
• Analyse reported deviations and escalate where necessary to drive deviation resolution
• Define an Approved Software List for RedHat Linux
• Update the change management process and contribute to the Change Advisory Board (CAB)
• Communicate updates to change management teams
• Update the project assurance process

Requirements

• Experience with Cyber Security standards such as ISO27001 or NIST SP 800-53
• Knowledge of Secure Configuration and Cyber Security Policy
• Experience writing cyber security policies and procedures
• Ideally experience with a Configuration Management Plan
• Strong documentation writing skills
• Ability to understand process flows and RACIs
• Ability to distil complex security concepts into simple language for business users
• Ability to summarise secure configuration requirements into a few principles
• Collaborate with Communications teams and Business Change teams to rollout new processes and procedures

Benefits

At Sword, our core values and culture are based on caring for our people, investing in training and career development, and building inclusive teams. We offer comprehensive benefits designed to support your professional development and enhance your quality of life. In addition to a Competitive Salary, you can expect:

• Personalised Career Development: A development plan tailored to your goals with learning opportunities
• Flexible working: Flexible arrangements to support work-life balance
• A Fantastic Benefits Package: Generous annual leave, enhanced family-friendly benefits, pension, private health, well-being and insurance schemes, employee assistance programme, and more

Sword is an equal opportunities employer. We value diversity and welcome applications from all qualified individuals. If you need adjustments during the hiring process, please let our talent acquisition team know when you apply.

Additional Information

• Seniority level: Entry level
• Employment type: Full-time
• Job function: Other
• Industries: IT Services and IT Consulting

Referrals increase your chances of interviewing at Sword Group. Get notified about new Configuration Management Analyst jobs in Aberdeen, Scotland, United Kingdom.