Cyber Risk Analyst

Key Performance Indicators Identify and assess risks through threat assessments and security operations data. Define and ensure timely response to Indicators of Compromise (IoCs) and Indicators of Attack (IoAs). Contribute to reducing Mean Time to Detection (MTTD) and Mean Time to Remediation (MTTR). Reduce JLR information security incidents. Ensure compliance with regulations like UNECE Regulation No. 155 and support the Cyber Security Management System (CSMS). Key Responsibilities Identify and investigate potential threats and attacks. Proactively take remedial action for ongoing threats. Conduct Threat Assessment & Remediation Analysis (TARAs) and prioritize cyber defenses. Monitor network activity, identify anomalies, and collaborate with Security Operations for improvements. Ensure compliance with risk management schedules and measure security risks effectively. Manage KPIs and risk indicators to enhance security outcomes. Provide expertise on supplier assurance and supply chain security risks. Promote threat hunting within the organization. Key Interactions Collaborate across Information Cyber Security, IT functions, Security Operations, Engineering, Governance, Risk & Compliance teams, and senior leadership. Knowledge, Skills, and Experience Essential: 5-15 years in security operations roles with expertise in incident investigations and key performance metrics (MTTD/MTTR). Knowledge of IoCs, IoAs, threat hunting, and network traffic analysis tools. Experience with IT audit, risk management, and regulatory compliance (NIST, ISO standards). Strong communication, analytical, and organizational skills, with the ability to engage stakeholders at all levels. Desirable: Certifications like CISA, CISM, ISO27001 Lead Auditor, or CISSP. Knowledge of UNECE Regulation No. 155 and experience in manufacturing/automation security operations. Global business experience and familiarity with information security risk management. Personal Profile Customer-focused, adaptable, and resilient with a strong can-do attitude. Results-driven, collaborative, and capable of handling complex and demanding environments. Strong problem-solving, communication, and interpersonal skills with the ability to influence stakeholders. Proactive in embracing change and delivering personalized, dependable experiences.