At Saint–Gobain we pride ourselves on being innovative, customer focused, agile, open and engaging and entrepreneurial. We are also proud to have been named a 'Top Employer' for 5 consecutive years. If you can lead and influence those around you, and you want to know what it's like to work for a top employer that is working hard to make the world a better home; then please read on to find out more about this exciting opportunity to join us as our Industrial Cyber & Information Security Analyst at Saint–Gobain Digital.

Is this role right for me?

First and foremost, we always want to recruit talented people that align well with our values and way of working. For this role, we are looking for someone with the following skills and experience:

• Experience working in an Industrial/Manufacturing IT Security, with particular focus on SCADA/ICS, is essential
• Ability to adopt new technical skills, maintain own knowledge on new technologies, in addition to a good level of awareness across a broad range of IT systems and solutions
• Working knowledge of Microsoft Windows (including Server) operating systems
• Experience of working with cloud applications (SaaS, PaaS)
• Experience of working with e–Commerce platforms
• Experience of documentation and/or process writing
• An understanding of application architecture
• Experience of enterprise–level IT
• Experience of systems integration and transfer of data between systems
• Awareness of PCI DSS and technical impact
• Experience of single sign–on or identity management solutions
• Awareness of encryption technologies
• Experience of Network Traffic Flow Analysis (Ports, Protocols)
• Good interpersonal and communication skills and a proven ability to work with all levels of business stakeholders
• Ability to work to tight deadlines and targets and prioritise conflicting demands on personal and departmental resources
• Occasional travel and overnight stays required

What will I be required to do in the role?

The Industrial Cyber Security Analyst will carry out security assessments against new and existing applications, highlighting areas of non–compliance and working with the relevant teams to ensure that they are addressed.

• Responsibility for ensuring applications are implemented in accordance with Group Security guidelines
• Complete annual application reviews to ensure continued compliance
• Liaise with third party software providers to complete SG Security Documentation and challenge responses to verify validity of submissions
• Schedule periodic Penetration tests and code reviews where relevant
• Highlight and challenge internally where industry best practices are not implemented
• Document and maintain system topology for reviewed applications
• Maintain a good relationship with SGTS and Group DSI to stay abreast of new security standards
• Support departmental teams during proof of concept, system design and implementation phases of projects to ensure security compliance
• Ensure all current and future systems adhere to Saint–Gobain security standards
• Work with business stakeholders to analyse their business requirements and guide thought processes towards achievable and pragmatic secure and integrated solutions

About Us

Are Saint–Gobain an Inclusive employer?

We're working hard to be, and we're keen to hire talented people regardless of their background, abilities, ethnicity, religion, sexual orientation, gender, national origin, taste in music, fashion sense or anything else that makes you, you!

We understand that a diverse workplace is not only a more enjoyable place to be, but also facilitates better decision making and innovation. So, whoever you are, and whichever Saint–Gobain business you join, you can be sure of a warm welcome with us.

And what about flexibility?

The world of work is changing, and at Saint–Gobain we are open to new ways of working in order to attract talented people to our business. We understand that everyone has different needs and commitments. Therefore, we are very open to discuss any flexible requirement or need that you may have for this role (this could be flexible hours, a job share, part time, to name a few). We can't guarantee to meet all requests for flexibility when we are recruiting, but we promise to listen.