Jobs Filtered by

india Cyber Security Analyst (Security Awareness focus)

  • Location
    (INDIA) and Gurgaon
  • Job Reference
    20153
  • Functional Area/Experience
    IT / Fresh Graduate

Job Description & Qualifications

The Economist Group is the leading source of analysis on international business and world affairs. We deliver our information through a range of formats, from newspapers and magazines to conferences and electronic services.

The Information Security team operates the Information Security Program and is responsible for the standard of information security across the Group. We define and implement our security strategy and mitigation activities across our brands. We work with business units to ensure that the confidentiality, integrity and availability risks that they are exposed to are clearly understood and appropriately managed.

The Cyber Security Analyst is a member of the Information Security team and this role will be part of a larger team who are responsible for protecting the company from cyber attacks. This role will specialise in the culture and learning aspect of the team. You will be responsible for developing a security and education program to cultivate a program of security within the organisation to ensure that all personnel connected with the company know, understand and follow our security requirements and behave in a secure manner. You will also learn about our security platforms and how to handle security incidents.

Responsibilities:

  • Ensure that our security awareness program meets all industry regulations, standards, and compliance requirements.
  • Ensure that our security awareness program communicates our security policies and requirements so that people know, understand and can follow them.
  • Identify the top human risks to our organisation and the behaviours we need to change to mitigate those risks. Develop and maintain a security awareness program that effectively changes these behaviours so our employees act in a secure manner, reducing the most risk to our organisation.
  • Create engaging training materials including presentations, videos, newsletters, and online modules to promote awareness and understanding of cyber security principles.
  • Create a positive program that engages employees, to include focusing on changing behaviours both at home and at work. Ultimately we want our employees to demonstrate the same secure behaviours regardless of where they are or the devices they are using.
  • Structure and maintain this program to be long term, so ultimately we are not changing just behaviours but culture.
  • Analyse and respond to emails reported as phishing.
  • Create a metrics framework that can effectively measure these requirements.
  • Respond to security-related queries from all parts of the Group, tailoring your response and advice depending on the scenario 
  • Stay informed about emerging cyber threats, industry trends, and regulatory requirements to ensure the relevance and accuracy of awareness materials and initiatives. 
  • Identify and communicate at all levels (evangelising) relevant security threats to the Group’s application platforms.
  • Serve as a point of contact for employees seeking guidance or information related to cyber security issues, and provide timely and accurate support and advice. 
  • Assist with investigating security alerts.
  • Participate in incident response, from discovery through to recovery, lessons learned and remediation

Qualifications:

  • Cyber Security-related certification
  • Ability to form complex ‘communications / messages’ in a simple, clear and concise manner to the various communities within our organisation. This can include different cultures, nationalities, international locations and languages.
  • Project management experience, the ability to plan, manage and maintain a complex, organisation wide program over the longer term.
  • Display practical knowledge of different message distribution techniques to ensure end user communities understand and continually apply the required behavioural change necessary to reduce the ‘human factors’ risk.
  • Ability to communicate with and coordinate the activities of others.
  • Understanding of the concepts of information risks and the different elements that make up risk. In addition, have at a minimum a basic understanding of the different concepts of information security.
  • Excellent analytical and problem-solving skills.
  • Strong communication and collaboration skills.
  • Ability to work independently and as part of a team.

In addition, the following would be desirable but not essential:      

  • Technology qualification
  • International work experience desirable      
  • Experience in the media and entertainment or another lightly regulated industry 
  • Experience with risk management, compliance, audit, business continuity or finance

Accountabilities

  • Ensure that our security awareness program meets all industry regulations, standards, and compliance requirements.
  • Ensure that our security awareness program communicates our security policies and requirements so that people know, understand and can follow them.
  • Identify the top human risks to our organisation and the behaviours we need to change to mitigate those risks. Develop and maintain a security awareness program that effectively changes these behaviours so our employees act in a secure manner, reducing the most risk to our organisation.
  • Create engaging training materials including presentations, videos, newsletters, and online modules to promote awareness and understanding of cyber security principles.
  • Create a positive program that engages employees, to include focusing on changing behaviours both at home and at work. Ultimately we want our employees to demonstrate the same secure behaviours regardless of where they are or the devices they are using.
  • Structure and maintain this program to be long term, so ultimately we are not changing just behaviours but culture.
  • Analyse and respond to emails reported as phishing.
  • Create a metrics framework that can effectively measure these requirements.
  • Respond to security-related queries from all parts of the Group, tailoring your response and advice depending on the scenario 
  • Stay informed about emerging cyber threats, industry trends, and regulatory requirements to ensure the relevance and accuracy of awareness materials and initiatives. 
  • Identify and communicate at all levels (evangelising) relevant security threats to the Group’s application platforms.
  • Serve as a point of contact for employees seeking guidance or information related to cyber security issues, and provide timely and accurate support and advice. 
  • Assist with investigating security alerts.
  • Participate in incident response, from discovery through to recovery, lessons learned and remediation

Experience, skills and professional attributes

  • Cyber Security-related certification
  • Ability to form complex ‘communications / messages’ in a simple, clear and concise manner to the various communities within our organisation. This can include different cultures, nationalities, international locations and languages.
  • Project management experience, the ability to plan, manage and maintain a complex, organisation wide program over the longer term.
  • Display practical knowledge of different message distribution techniques to ensure end user communities understand and continually apply the required behavioural change necessary to reduce the ‘human factors’ risk.
  • Ability to communicate with and coordinate the activities of others.
  • Understanding of the concepts of information risks and the different elements that make up risk. In addition, have at a minimum a basic understanding of the different concepts of information security.
  • Excellent analytical and problem-solving skills.
  • Strong communication and collaboration skills.
  • Ability to work independently and as part of a team.

In addition, the following would be desirable but not essential:      

  • Technology qualification
  • International work experience desirable      
  • Experience in the media and entertainment or another lightly regulated industry 
  • Experience with risk management, compliance, audit, business continuity or finance

The Economist Group values diversity. We are committed to equal opportunities and creating an inclusive environment for all our employees. We welcome applicants regardless of ethnic origin, national origin, gender, gender identity, race, colour, religious beliefs, disability, sexual orientation , age or marital status.



X

Please confirm If you want to unregister

Yes No

X

You have been unregistered from gradlink