Cyber Security Specialist

Department
Information Security
Location
Bristol CEC United Kingdom
Date Posted
04-08-2025

We are looking for a Cyber Security Specialist to join the Information Security team on a permanent basis, based at our Bristol office.

Overall Job Purpose:

  • To collaborate with and support UK business divisions and other Digital & IT teams, to provide advice, guidance and help manage the business’ Cyber and Operational Security risks.

  • To maintain effective security documentation supported by periodic audit and reviews to ensure compliance against required standards

  • To actively remain informed and educated in respect of new and evolving areas of Technology, Information and Cyber security and be a proactive champion of security within the business.

Key Accountabilities:

Cyber Security

  • Provide Cyber Security advice to the business in respect of changes, new products, proposed business strategies and projects to ensure that Ayvens UK achieves its business objectives safely and securely.
  • Provide technical subject matter expertise, security standards and define security tools, systems and solutions.
  • Work closely with Digital & IT teams and wider business teams to ensure services are ‘Secure by Design’
  • Maintain effective security documentation (ASA, AAS, SBD etc) supported by periodic audit and reviews to ensure NIST compliance. Aim to improve compliance scores where possible.
  • Co-ordinate effective security reviews of new or updated products and systems, in-line with Ayvens central requirements.
  • Contribute to the ongoing maturity of the IT applications, infrastructure and services within the business.
  • Manage the implemetion of security projects and initiatives as directed to ensure required outcmes are met
  • Advise the business and help to identify and manage possible Cyber Security risks and issues. Provide clear guidance and awareness to the business as to Cyber Security group policies, regulations, codebooks, standards, and frameworks relating to Cyber Security issues.
  • Support the Ayvens UK Information Security awareness program, support the delivery of awareness activities and communication across the business as appropriate.

Skills and Experience Required

  • Excellent written, verbal, report writing and presenting skills.
  • Excellent time management, planning, and organisational skills.
  • Demonstrable Cyber / Information Security knowledge and experience.
  • Good understanding of Risk Management and Security assessments within an IT or Security environment.
  • Good understanding of Information Technology and software development vulnerabilities and risks.
  • Experience of managing multiple streams of work.
  • Knowledge of secure software development lifecycles and software security vulnerabilities.
  • Awareness of threat modelling techniques.
  • Awareness of secure software frameworks and guidelines such as OWASP, and NIST.
  • A passion for detail and accuracy.
  • An ability to analyse complex problems and understand root causes.
  • Articulate, with the ability to explain things in non-technical language at all levels.
  • Self-motivated with a desire to learn about new and evolving technologies, and associated Security threats, by seeking out resources to support personal development.

IT Applications:

Good IT literacy for all MS office products