Senior Cloud Security Analyst

We believe in better. And we make it happen.

Better content. Better products. And better careers.

Working in Tech, Product or Data at Sky is about building the next and the new. From broadband to broadcast, streaming to mobile, SkyQ to Sky Glass, we never stand still. We optimise and innovate.

We turn big ideas into the products, content and services millions of people love.

And we do it all right here at Sky.

The Senior Cloud Security Analyst will be involved in all aspects of cloud security within the organization. This includes designing and implementing security controls, working as part of a team of security professionals, monitoring cloud environments for threats, and ensuring compliance with industry regulations.

What you’ll do

• Provide guidance and support to junior members of the team, on the practice and application of security principles and solutions.

• Educate our business on cybersecurity best practice for cloud computing and contribute to the creation of security solutions that allow our business to implement that best practice easily and by default.  Working with stakeholders across related disciplines you will contribute to efforts to integrate our cloud security solutions and toolchain with Sky’s enterprise security capabilities.

• Help to develop and communicate the organization's cloud security strategy and vision, by staying updated on emerging cloud security trends, threats, and best practices.

• Design and implement security controls, including identity and access management, encryption, and network security.

• Support the development and enforcement of cloud security policies, standards and procedures. Ensure alignment with industry standards (e.g., NIST, CIS), regulations, and best practices.

• Monitor cloud environments for security incidents and vulnerabilities.Support the development and maintenance of incident response and disaster recovery plans for cloud services.Support the implementation of threat detection and prevention mechanisms.

• Help ensure cloud services comply with relevant regulations (e.g., GDPR, HIPAA). Conduct risk assessments and develop mitigation strategies. Prepare for and participate in security audits and assessments.

• Support the assessment of the security of third-party cloud service providers. Evaluate vendor security practices and contracts.

What we look for

• Extensive experience in Cloud Security in a multi-cloud hybrid environment at Enterprise scale.

• An excellent understanding of both Cybersecurity and Cloud Computing and experience in designing and implementing security solutions and the 'infrastructure as code' driven ‘automate first’ philosophy.

• A demonstrable background in supporting the design and implementation of cybersecurity solutions for infrastructure and services across one or more of AWS, Azure, and GCP in a hybrid cloud environment using an automate-first approach with proficiency in one or more high-level development languages.

• Experience in the design and implementation of Identity, Authentication, and Authorization systems across multiple cloud providers in a hybrid cloud environment.

• A background in designing and engineering security solutions for distributed and cloud native applications, with specific application to Docker, Kubernetes, and function compute-based workloads as well as those applications deployed using an automated ‘path-to-production’ in an Agile / DevOps environment.

• Experience in the design and delivery of security solutions that encompass multiple layers (e.g., Application, Session, Transport, Data etc.) of the OSI model.

• An ability to work toward achieving a common vision for Cloud Security at Sky and in establishing and maintaining relations with stakeholders across multiple departments within an Enterprise environment.

• An understanding of security frameworks e.g., NIST, ISO27001.

Team overview

Our products, platforms and technologies are constantly evolving that’s why keeping Sky safe from cyber-attacks is one of our top priorities. Our Cyber Security team helps the business grow while protecting our customers, colleagues and partners from increasingly sophisticated cyber threats. Our team includes Cyber Fusion Centre, Security Services, Risk and Compliance, Programme Delivery and Business Security, and we work across the UK, Italy and Germany. Join us and you’ll get involved in tackling challenges and future threats in an ever-changing cyber landscape.

The Rewards:  

There's a reason people can't stop talking about #LifeAtSky. Our great range of rewards really are something special, here are just a few:  

• Sky Q, for the TV you love all in one place  

• A generous pension package  

• Private healthcare  

• Discounted mobile and broadband  

Where you'll work:  

Our Osterley Campus is a 10-minute walk from Syon Lane train station. Or you can hop on one of our free shuttle buses that run to and from Osterley, Gunnersbury, Ealing Broadway and South Ealing tube stations. There’s also plenty of bike shelters and showers.  

On campus, you’ll find 13 subsidised restaurants, cafes, and a Waitrose. You can keep in shape at our subsidised gym, catch the latest shows and movies at our cinema, get your car washed and even get pampered at our beauty salon.   

Inclusion:  

Recognised as an ‘Inclusive Top 50 Employer’ and a ‘Times Top 50 Employer for Women’, we’re working hard to ensure we’re a truly inclusive place to work. This means we don’t just look at your CV. We’re more focused on who you are and the potential you’ll bring to Sky. 

And we'll do everything we can to support you during your application. If you need us to make any adjustments to our recruitment process, speak to our recruitment team who will be happy to support you.   

Why wait?   

Apply now to build an amazing career and be part of a brilliant team. We can’t wait to hear from you.   

To find out more about working with us, search #LifeAtSky on social media. A job you love to talk about.  

Just so you know: if your application is successful, we’ll ask you to complete a criminal record check. And depending on the role you have applied for and the nature of any convictions you may have, we might have to withdraw the offer.