Cybersecurity Analyst

Responsibilities: By stepping into Costello Medical’s first Cybersecurity Analyst role, you will be responsible for conducting security incident detection, monitoring and response, as well as supporting with the delivery of key IT security projects for our Technical Operations team.

Salary: £35,000 to £40,000 per annum, depending on your qualifications and previous experience.

Benefits: Discretionary profit share bonuses, hybrid working options that allow you to work from home up to 50% of your time after passing probation, generous holiday allowance, flexible working hours, employer pension contributions, comprehensive travel insurance, private medical insurance, critical illness cover, income protection, full funding for external training, interest-free travel loan scheme, discounted gym memberships, and more.

Role Type: Full-time, permanent.

Start date: We are currently recruiting for start dates in 2024, including November and December. However, we can also consider applications from those seeking a deferred start date in early 2025. You will be asked to state your availability on your application form.

As Costello Medical continues to experience rapid growth, our vibrant and innovative Technical Operations (TechOps) team is seeking the company’s first dedicated Cybersecurity Analyst. This brand-new and pivotal role offers a talented individual the chance to shape the future of our cybersecurity efforts and lay the foundation for an in-house Security Operations Centre (SOC).

In this role, you will serve as the primary cybersecurity expert, triaging and responding to security incidents while contributing to the development and maintenance of innovative security processes and strategies. You will work both independently and collaboratively with the wider TechOps team, consulting on IT projects, providing strategic advice, and validating security elements to safeguard our IT infrastructure.

You will be responsible for promoting effective cyber hygiene across the company by conducting phishing simulations and using your knowledge of the evolving threat landscape to guide cybersecurity training initiatives. Additionally, you will have ample opportunities to enhance Costello Medical’s security by proposing and delivering security projects of your own.

Key responsibilities will include:

• Incident detection and response using EDR/XDR and SIEM technologies, including Microsoft Defender and Sentinel.
• Contributing to the development and maintenance of security procedures, including vulnerability scanning, remediation, and crafting playbooks for responding to alerts.
• Conducting phishing simulations, reporting results, and carrying out remediation activities.
• Developing and delivering training on IT security and data management to a variety of audiences.
• Proactively consulting on a variety of IT projects, providing strategic advice and validating security elements to ensure effective risk management and mitigation.
• Representing the TechOps team by explaining IT security processes, announcing changes, soliciting feedback, and maintaining strong relationships with other teams.
• Championing risk management and effective data management practices across the global business.
• Collaborating with other teams, such as our in-house Legal team, to ensure compliance with the latest security standards and helping the company achieve certifications such as CyberEssentials+ and ISO27001.

As you gain experience and confidence within the role, you will have the opportunity to lead incident response efforts, implement process improvements, and spearhead the development of new security strategies. You will become the go-to person for IT security and risk mitigation, establishing yourself as Costello Medical’s designated cybersecurity expert.

Hybrid Working Policy: We recognise that home-working can improve work life balance, reduce commuting times and costs, and provide the opportunity to juggle personal commitments. At the same time, we believe that having face-to-face time in the office holds many benefits and is central to ensuring that the community we have created, where people have a workplace they belong to and feel part of, is never lost.

Therefore, we offer flexible working arrangements that allow our colleagues who have passed probation to work from home for up to half of the time, measured across a 2-week rolling period. During your probationary period (normally the first 6 months of the role) you will be able to work from home for 1 day per week.

Why Choose a Career in IT Security Operations with Costello Medical?

Costello Medical is a rapidly growing global healthcare agency specialising in medical communications, market access and health economic and outcomes research. Our vision is to be a leading global partner consistently striving for meaningful and outstanding contributions that improve people’s health and lives.

We strongly recognise the importance of IT talent and believe we offer a unique platform for you to build a long-lasting career with us.

• A chance to collaborate with others. In a highly innovative and growing company, our colleagues are always looking for the best ways to support our clients and each other. Whether safeguarding a new internal process, consulting on an IT project, or providing risk management training, you will be the face of IT security operations and risk management globally.
• Develop new cutting-edge skills. We are continuously improving our systems; over the last few years, we have stripped out much of our existing infrastructure and implemented innovative cloud-based solutions with advanced security controls. As a Cybersecurity Analyst, you will gain valuable experience with cutting edge technologies, and will have the opportunity to implement new technologies of your own!
• Users who respect and value you. Our colleagues deeply care about the integrity of Costello Medical and passionately uphold its data security requirements, making it easy for you to build positive, trusting and respectful relationships with them. Your support and guidance will be truly valued, making you an integral part of the company.
• A truly varied role. As a Cybersecurity Analyst, you will be closely involved in various activities including IT security projects, risk assessment, training, and technical writing. As the company grows, our needs are often changing, and new opportunities will continually arise.
• Have your say and shape your own career. Given we outsource a lot of our day-to-day IT support, our TechOps team is relatively small, yet plays a vital role for the company. Your voice matters; you will have a significant influence on team decisions, and will be encouraged to take your career in a direction that challenges you to meet your own goals.
• We are invested in our culture. We are committed to our company values, promoting a fun, friendly and innovative workplace. As a result, we have been listed in The Top 100 Companies to Work For list for six consecutive years, and achieved B Corp certification in 2022. These values are embraced by the entire company, including the TechOps team.
• Contribute towards something meaningful. At Costello Medical, we are committed to improving health globally, and our clients include leading pharmaceutical and medical technology companies, patient and public health bodies, as well as charitable organisations. You can learn more about what we do here: https://www.costellomedical.com/what-we-do/. By maintaining our security infrastructure, you are enabling us to confidently serve our clients, directly contributing towards improving global health. You will also be supporting a company that believes in corporate social responsibility, giving back to the local community through funded volunteering and pro bono days.

Requirements

About You

We are seeking a highly motivated and proactive individual eager to contribute innovative ideas and deliver lasting improvements. As the first Cybersecurity Analyst at Costello Medical, you will have the unique opportunity to shape your own career and the broader development of our in-house cybersecurity team, developing procedures, setting up tooling, and guiding the service over time.

This role is therefore ideal for someone ambitious and ready to take on significant responsibility, channelling their interest in building a strong security posture for the company across various technical and non-technical domains. You will have the chance to work closely with IT management at the company to rapidly gain experience and make a substantial impact, gaining professional recognition and advancing your career.

Essential requirements for the role are:

• A degree-level or higher qualification in Cybersecurity or a related discipline (minimum 2.1 or equivalent). Related disciplines include but are not limited to; Information Technology, Computer Science, Risk Management, Law and Technology, or similar.
• A minimum of 2 years’ professional experience in IT security roles, or similar.
• Excellent knowledge of IT systems, infrastructure and security controls, enabling the development of data management solutions, policies and processes that can be seamlessly adopted by the company.
• A “can do” attitude, a strong customer focus at all times, and a willingness to be an advocate for IT security throughout the business.
• Exceptional organisational skills, a strong awareness of all facets of a task or longer-term project, and the ability to adapt to changing deadlines.
• The ability to plan and prioritise your own time and communicate this to others.
• Excellent written and verbal communication skills. This includes attention to detail, a confident and professional tone, and the ability to explain technical concepts in a digestible way to a variety of audiences.
• Strong interpersonal skills and the ability to influence senior stakeholders to make important decisions that drive security improvements across the company.

Desired requirements for the role are:

• Experience proposing and/or delivering innovative IT projects independently.
• Experience in managing highly sensitive and confidential data, including commercially confidential, intellectual property, and special category personal data.
• Knowledge of data privacy regulations, such as the EU General Data Protection Regulation and the Data Protection Act 2018.

At Costello Medical, our recruitment approach focuses on developing talent from within through on-the-job training and tailored peer support. Our Cybersecurity Analyst role is no exception, and we welcome applications from those looking to advance their career within a successful and growing global company.

What We Offer

• A starting salary of £35,000 to £40,000 per annum, depending on your qualifications and previous experience.
• A discretionary profit share bonus paid twice per year.
• 25 days’ annual leave plus bank and public holidays.
• The chance to work from home for up to half of your working time after passing probation.
• Flexible benefits scheme offering additional holiday, cash payments and pension contributions.
• 4% employer pension contributions.
• Private Medical Insurance which offers comprehensive cover on a “medical history disregard” basis.
• Paid study leave and funding for external qualifications.
• Cycle to Work scheme and an interest-free travel loan scheme.
• Critical Illness Cover, Income Protection and Life Assurance.
• Access to an Employee Assistance Programme.
• Discounted gym memberships.
• Regular company-funded social activities.

Our recruitment process includes a telephone interview with a member of the Talent Acquisition team, followed by an assessment for you to complete in your own time. If successful, you will be invited to a final interview with senior members of our TechOps team. Our standard recruitment process typically lasts around 2 to 3 weeks, however this can be adapted if necessary.

As an equal opportunity employer, we are committed to fostering a diverse and inclusive workforce and, throughout the recruitment process, there are a number of reasonable adjustments we can provide. Please contact the People Team via recruitment@costellomedical.com should you require reasonable adjustments at any stage.

You are required to submit your CV and a cover letter via our online application form. In your cover letter, you must explain why you think you would be suited to the role and why you would like to join Costello Medical, with examples to support both. Your CV should clearly state the dates of all qualifications and grades achieved where applicable.

While we embrace Artificial Intelligence (AI) technologies to innovate and improve processes, we want to understand your unique skills and experiences throughout the recruitment process. Therefore, if you use AI to assist with your application, we recommend that you do not rely solely on this technology to generate your application materials. As your role may involve developing new written content from scratch and handling confidential data that cannot be uploaded to AI technology, it is important for us to assess your own skills and abilities.