We believe in better. And we make it happen.

Better content. Better products. And better careers.

Working in Tech, Product or Data at Sky is about building the next and the new. From broadband to broadcast, streaming to mobile, SkyQ to Sky Glass, we never stand still. We optimise and innovate.

We turn big ideas into the products, content and services millions of people love.

And we do it all right here at Sky.

The Senior Cloud Security Analyst will be involved in all aspects of cloud security within the organization. This includes designing and implementing security controls, working as part of a team of security professionals, monitoring cloud environments for threats, and ensuring compliance with industry regulations.

What you’ll do

*

Provide guidance and support to junior members of the team, on the practice and application of security principles and solutions.

*

Educate our business on cybersecurity best practice for cloud computing and contribute to the creation of security solutions that allow our business to implement that best practice easily and by default. Working with stakeholders across related disciplines you will contribute to efforts to integrate our cloud security solutions and toolchain with Sky’s enterprise security capabilities.

*

Help to develop and communicate the organization's cloud security strategy and vision, by staying updated on emerging cloud security trends, threats, and best practices.

*

Design and implement security controls, including identity and access management, encryption, and network security.

*

Support the development and enforcement of cloud security policies, standards and procedures. Ensure alignment with industry standards (e.g., NIST, CIS), regulations, and best practices.

*

Monitor cloud environments for security incidents and vulnerabilities.Support the development and maintenance of incident response and disaster recovery plans for cloud services.Support the implementation of threat detection and prevention mechanisms.

*

Help ensure cloud services comply with relevant regulations (e.g., GDPR, HIPAA). Conduct risk assessments and develop mitigation strategies. Prepare for and participate in security audits and assessments.

*

Support the assessment of the security of third-party cloud service providers. Evaluate vendor security practices and contracts.

What we look for

*

Extensive experience in Cloud Security in a multi-cloud hybrid environment at Enterprise scale.

*

An excellent understanding of both Cybersecurity and Cloud Computing and experience in designing and implementing security solutions and the 'infrastructure as code' driven ‘automate first’ philosophy.

*

A demonstrable background in supporting the design and implementation of cybersecurity solutions for infrastructure and services across one or more of AWS, Azure, and GCP in a hybrid cloud environment using an automate-first approach with proficiency in one or more high-level development languages.

*

Experience in the design and implementation of Identity, Authentication, and Authorization systems across multiple cloud providers in a hybrid cloud environment.

*

A background in designing and engineering security solutions for distributed and cloud native applications, with specific application to Docker, Kubernetes, and function compute-based workloads as well as those applications deployed using an automated ‘path-to-production’ in an Agile / DevOps environment.

*

Experience in the design and delivery of security solutions that encompass multiple layers (e.g., Application, Session, Transport, Data etc.) of the OSI model.

*

An ability to work toward achieving a common vision for Cloud Security at Sky and in establishing and maintaining relations with stakeholders across multiple departments within an Enterprise environment.

*

An understanding of security frameworks e.g., NIST, ISO27001