As a Cyber Security Analyst, you will play a crucial role in ensuring compliance with the UK Telecommunications (Security) Act (TSA) cyber regulations for telecommunications suppliers. Your primary responsibilities will include engaging with suppliers to assess and enforce security requirements mandated by the TSA, researching emerging cyber threats in the supply chain, and developing robust disaster recovery and contingency plans in the event of security breaches.
Key Deliverables
- Engage with telecommunications suppliers to ensure compliance with UK TSA cyber regulations.
- Collaborate closely with suppliers to assess and enforce security requirements mandated by the TSA.
- Research and evaluate emerging cyber threats in the supply chain and propose effective mitigation strategies.
- Develop comprehensive disaster recovery and contingency plans to address security breaches.
Key Responsibilities
- Analyze and review vendor contracts, assessing legal and technical terms for compliance with TSA regulations.
- Negotiate contract terms to ensure optimal value and mitigate potential risks.
- Work closely with internal stakeholders, including legal and technical teams, to address complex contractual issues.
- Maintain clear and concise documentation of contract review processes and findings.
- Identify opportunities for contract standardization and improvement.
Key Accountabilities
- Engage directly with suppliers to ensure compliance with UK TSA cyber regulations through effective communication and collaboration.
- Utilize questionnaires and assessments to ensure alignment with TSA security requirements.
- Ensure all UK TSA schedules are signed in accordance with identified risks and compliance standards.
- Develop and implement disaster recovery and contingency plans with the support of risk Subject Matter Experts (SMEs) and Procurement Business Partners.
- Provide support to the Procurement Director in updating policies related to cyber security.
- Assist in providing relevant training and information to Legal and Contract procurement teams.
- Support training initiatives for Procurement Business Partners to enhance their understanding of cyber security requirements and procedures.
Qualifications
- Bachelor’s degree in Cyber Security, Information Technology, or related field.
- Proven experience in contract analysis, negotiation, and risk management.
- Strong understanding of cyber security principles and regulations, particularly in the telecommunications industry.
- Excellent communication and collaboration skills, with the ability to engage effectively with internal and external stakeholders.
- Detail-oriented with strong analytical and problem-solving abilities.
- Certified Information Systems Security Professional (CISSP) or similar certification is a plus.
Join us in this critical role where you will contribute to ensuring the security and resilience of our telecommunications supply chain in compliance with regulatory requirements.