CYBER SECURITY AND COMPLIANCE ANALYST

Purpose of role:As Cyber Security Analyst, you'll be responsible for supporting the ongoing operation and improvement of Cyber and Information Security systems to ensure Park Holiday’s systems are protected against latest threats and vulnerabilities. * Perform regular vulnerability assessments and penetration tests to identify weaknesses in systems and applications. * Collaborate with IT teams to remediate vulnerabilities and track their resolution. * Develop and maintain incident response plans and playbooks. * Assist in the development and implementation of information security policies, standards, and guidelines, * Ensure IT compliance with relevant regulations (e.g., GDPR, SOX, PCI) and industry best practices.Key Job Accountabilities * Perform regular vulnerability assessments and penetration tests to identify weaknesses in systems and applications. * Collaborate with IT teams to remediate vulnerabilities and track their resolution. * Stay updated on the latest vulnerabilities and threat intelligence to inform proactive security measures * Assist in the development and implementation of information security policies, standards, and guidelines. * Collaborate with IT teams to remediate vulnerabilities and track their resolution. * Ensure compliance with industry standards, regulations, and internal policies, tracking any exceptions. * Ensure Security Operations BAU activities are completed promptly and to required time scales. * Develop and maintain incident response plans and playbooks. * In partnership with the CISO, Analyse security logs, alerts, and reports to identify patterns and trends indicative of cyber threats. * Generate reports on security incidents, vulnerabilities, and compliance status for management and stakeholders.Assist senior members of the team with the development staff awareness training to mature the security culture across the group * Lead cybersecurity drills and awareness talks to improve security readiness across the organization;Our systems are primarily built using the Microsoft stack with a desire to make increased use of cloud technology including but not limited to Azure, Dynamics 365, and Office 365