Cyber Risk Analyst

Key Performance Indicators

• Identify and assess risks through threat assessments and security operations data.
• Define and ensure timely response to Indicators of Compromise (IoCs) and Indicators of Attack (IoAs).
• Contribute to reducing Mean Time to Detection (MTTD) and Mean Time to Remediation (MTTR).
• Reduce JLR information security incidents.
• Ensure compliance with regulations like UNECE Regulation No. 155 and support the Cyber Security Management System (CSMS).

Key Responsibilities

• Identify and investigate potential threats and attacks.
• Proactively take remedial action for ongoing threats.
• Conduct Threat Assessment & Remediation Analysis (TARAs) and prioritize cyber defenses.
• Monitor network activity, identify anomalies, and collaborate with Security Operations for improvements.
• Ensure compliance with risk management schedules and measure security risks effectively.
• Manage KPIs and risk indicators to enhance security outcomes.
• Provide expertise on supplier assurance and supply chain security risks.
• Promote threat hunting within the organization.

Key Interactions

• Collaborate across Information Cyber Security, IT functions, Security Operations, Engineering, Governance, Risk & Compliance teams, and senior leadership.

Knowledge, Skills, and Experience

Essential

• 5-15 years in security operations roles with expertise in incident investigations and key performance metrics (MTTD/MTTR).
• Knowledge of IoCs, IoAs, threat hunting, and network traffic analysis tools.
• Experience with IT audit, risk management, and regulatory compliance (NIST, ISO standards).
• Strong communication, analytical, and organizational skills, with the ability to engage stakeholders at all levels.

Desirable

• Certifications like CISA, CISM, ISO27001 Lead Auditor, or CISSP.
• Knowledge of UNECE Regulation No. 155 and experience in manufacturing/automation security operations.
• Global business experience and familiarity with information security risk management.

Personal Profile

• Customer-focused, adaptable, and resilient with a strong 'can-do' attitude.
• Results-driven, collaborative, and capable of handling complex and demanding environments.
• Strong problem-solving, communication, and interpersonal skills with the ability to influence stakeholders.
• Proactive in embracing change and delivering personalized, dependable experiences.