Senior Security Analyst

LSEG (London Stock Exchange Group)
Colombo
Industry : IT Services
Type : Full Time
Closing Date : 2022/01/09
Role Purpose

Responsible for carrying out day-to-day operational aspects of cloud security which includes risk assessment and approvals, registering control compliance exceptions, and security alert investigations.

Key responsibilities
  • Perform risk assessments on cloud change requests which require CyberSecurity review and approval.
  • Monitor cloud security alerts and investigate whether threat notifications and control gaps require remediation action.
  • Analyze the efficiency of cloud security alerts and propose refinements to reduce the volume of false positives.
  • Support the GSOC team where needed with any required cloud security investigations.
  • Support the CET Cloud Operations team with any required security-related questions or issues.
  • Support LSEG application teams with any required security-related questions or issues.
  • Support the monthly production of cloud security compliance metrics packs.
  • Conduct periodic cloud security control exceptions recertification campaigns.
  • Support the production of periodic cloud security control housekeeping reports and assist application teams who are responsible for remediation.
  • Create cloud security operations runbooks to document the day-to-day processes that are performed.
Critical deliverables

Ensuring that change events and control non-compliance events receive timely risk assessment and action to keep LSEG cloud environments safe and not unduly slow down technology development pace.

Impact

Highly important to provide timely operational security support for LSEG’s public cloud environments and the management of security risks associated with business services in the cloud.

Key KPIs
  • A number of cloud security operations support request tickets are completed per measured period.
  • A number of cloud security alerts are investigated and remediated or concluded as no further action is required per measured period.
Technical / job functional knowledge
  • 3+ years of performing security operations, technical support, or information security roles.
  • Proven experience in the analysis of the risk associated with security threat alerts and security control gaps.
  • Hands-on experience as an analyst with public cloud technologies including Amazon Web Services (AWS), Microsoft Azure, and/or Google Cloud Platform (GCP).
  • Experience working with cloud security threat and control gap alerting tools.
Business and sector expertise

Personal Skills And Capabilities

Preferred prior experience in the financial services sector.
  • Must take ownership of tasks and demonstrate a high degree of automatic responsibility to ensure completion.
  • Must possess good written and oral communication skills in order to interact professionally with other cloud-relevant teams and stakeholders.
At LSEG, we believe that creating a diverse and inclusive organization is fundamental to the way we deliver on our promise – and our purpose. You’ll be part of an organization of over 25,000 people, spanning 70 countries. We recognize the individual perspectives each of our colleagues brings, and our diverse workforce is one of our greatest strengths. In supporting collaboration and creativity and encouraging new ideas across a diverse and inclusive workforce, we can improve how we are driving financial stability, empowering economies, and enabling customers to create sustainable growth.

LSEG offers a range of tailored benefits and support from healthcare and retirement planning to paid volunteering days and wellbeing initiatives.

We are an equal opportunities employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. In accordance with applicable law, we make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as any mental health or physical disability needs.

Please take a moment to read this privacy notice carefully, as it describes what personal information the London Stock Exchange Group (LSEG) (“We”) may hold about you, what it’s used for, and how it’s obtained, your rights and how to contact us as a data subject.

If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.