Senior Information Security Analyst, UK

This job is brought to you by Jobs/Redefined, the UK's leading over-50s age inclusive jobs board.

Description

About Realty Income

Realty Income (NYSE: O), an S&P 500 company, is a real estate partner to the world's leading companies. Founded in 1969, we invest in diversified commercial real estate and have a portfolio of over 15,450 properties in all 50 U.S. states and in seven countries in Europe.

The European portfolio including the UK has grown significantly since our first international acquisition, a £429m 12-property portfolio from Sainsbury's in 2019. In just five years the portfolio now includes investments of over €11bn, and 483 distinct properties.

Be a part of this growth story for a world leading Real Estate Investment Trust! As a trailblazer for the Info Sec team in Europe, this opportunity will empower your career, allowing you to take on additional responsibility and challenges, whilst you broaden your experience and skillsets.

Position Overview:

The Senior Information Security Analyst is responsible for enhancing our security posture, developing security processes and procedures, and responding to security incidents. This role will work with other teams across the organization to ensure that vulnerabilities are discovered and remediated in a timely manner to ensure the security of IT and development systems.

Key Responsibilities:

Security Operations and Monitoring

1. Monitor security alerts, investigate incidents, and respond to threats in a timely manner.
2. Collaborate with the Security Operations Center to respond to critical incidents and enhance the tools for better detection and alerting.
3. Complete assigned ServiceNow incidents and tasks within the defined SLAs.
4. Implement, manage, and optimize new and existing security tools, including but not limited to EDR, ZTNA and IAM.
5. Work with IT and development team members to ensure essential security and operational logging is being collected and analyzed and relevant security alerts are being generated.
6. Automate processes to reduce manual task delivery and enhance process delivery.

Vulnerability Management

1. Collaborate with IT and development teams to detect and remediate vulnerabilities across the enterprise in alignment with defined SLAs.
2. Understand current and emerging security threats and assist in the design of security tools to mitigate threats across the enterprise.
3. Conduct regular threat hunt activities and report findings to leadership.

Security Governance and Compliance

1. Ensure all work follows relevant security standards and regulations, including SOX, NIST, GDPR, CPRA, and other industry-specific requirements.
2. Participate in annual security assessments and audit activities.
3. Develop and implement Standard Operating Procedures and other documentation as it relates to Information Security processes and best practices.
4. Participate in the Security Awareness program to promote a culture of security throughout the organization.

REQUIRED QUALIFICATIONS:

Knowledge, Skills, and Abilities:

1. Suitable experience in an Information Security role.
2. Some relevant experience in a technical IT role (System Administration/Network Administration/DevOps).
3. Knowledge of security frameworks and regulatory compliance standards (NIST CSF, SOX ITGC, GDPR, MITRE ATT&CK, etc.)
4. Experience with common industry SIEM and vulnerability management platforms.
5. Experience maintaining the Microsoft Defender platform and other Microsoft security products.
6. Ability to rank and prioritize vulnerabilities and security recommendations appropriately within the context of the infrastructure and business processes.
7. Experience maintaining identity and access management systems including PAM technology and other authentication and authorization control platforms.
8. Experience with Incident Response best practices.
9. Knowledge of cloud security best practices.
10. Knowledge of DevOps practices and secure software deployment frameworks.
11. Knowledgeable of Data Loss Prevention (DLP) concepts and techniques as well as other data protection practices.
12. Working technical knowledge of IT systems, Microsoft Directory and Cloud Services.
13. Excellent written and verbal communication skills including the ability to present findings and risks to senior leadership.
14. Strong analytical and problem-solving skills.
15. Ability to work independently, take initiative, and manage workload with minimal supervision.
16. Hybrid working arrangements, in the office Tuesday / Wednesday / Thursday.
17. Make yourself available outside of normal working hours for security incidents.

Education:

1. Bachelor's degree in information security or related field or equivalent; combination of education and experience.
2. Must have Cybersecurity certification(s) (CISSP, Sec+, CCSP, CEH) or equivalent.

Our Mission & Values

For more than 50 years, Realty Income has been guided by our mission to invest in people and places to deliver dependable monthly dividends that increase over time. We do this by nurturing long-term, meaningful relationships that enable people to achieve a better financial outlook. We understand that when individuals succeed financially, they are able to provide for their families, support local businesses and pursue their greatest ambitions-creating a lasting positive impact on communities.

Realty Income is committed to diversity and inclusion and welcomes all applicants regardless of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex, sexual orientation or educational background.

Realty Income is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. If you require accessibility support to submit your application or other reasonable accommodations to participate in the recruitment process, please contact [email protected], or call 800-375-6700. An employee will respond to your message to begin the interactive process. Please note that this phone number and email address are only for individuals seeking a disability accommodation when applying for a job.

#J-18808-Ljbffr