Role Profile: A Cyber Security Technical Professional operates within business or technology/engineering functions across various sectors of the economy, including critical national infrastructure (such as energy, transport, water, finance), public and private entities, both large and small. They typically work with a high degree of autonomy, leading teams engaged in researching, analysing, modelling, assessing, and managing cyber security risks. Additionally, they design, develop, justify, manage, and operate secure solutions, as well as detect and respond to incidents. Their work adheres to applicable laws, regulations, standards, and ethics.
Typical Job Roles:
Cyber Risk Manager; Cyber Risk Analyst; Cyber Research Analyst; Cyber Incident Manager; Cyber Security Engineer; Cyber Security Design Engineer.
Entry Requirements: Individual employers establish selection criteria, which may include three 'A' levels (including maths), or other relevant qualifications or experience.
Technical Knowledge and Understanding
- Foundations of Cyber Security, its significance, concepts, threats, vulnerabilities, and assurance.
- Design, build, configure, optimise, test, and troubleshoot simple and complex networks.
- Apply statistical techniques to large data sets; identify vulnerabilities in big data architectures and deployment.
- Build, test, and debug a digital system to a specification.
- Configure an Operating System in accordance with security policy; identify threats and features.
- Write, test, debug programs in high and low-level languages and scripts.
- Design, implement, and analyse algorithms.
- Construct software to interact with the real world and analyse for security exploits.
- Analyse malware and identify its mechanisms.
- Apply secure programming principles and design patterns to address security issues.
Note: The above list represents a selection of competencies from the comprehensive set required for the Cyber Security Technical Professional.
Essential Professional, Interpersonal, and Business Skills
- Effective Communication: Proficient in written communication, adept at expressing complex ideas clearly.
- Engaging Presentations: Delivers concise, captivating, and well-organised verbal presentations, arguments, and explanations.
- Negotiation Mastery: Skilfully navigates diverse interests, both internal and external, demonstrating exceptional negotiation abilities.
- Understanding Others: Identifies the preferences, motivations, strengths, and limitations of individuals, fostering effective collaboration and motivation.
- Team Collaboration: Works collaboratively with others to accomplish shared objectives and goals.
- Active Listening and Influence: Demonstrates active listening skills and effectively leads, influences, and persuades others.
- Constructive Feedback: Offers and receives feedback constructively, integrating it into personal development and continuous learning.
- Analytical Thinking: Utilises analytical and critical thinking skills to develop technology solutions, employing structured problem-solving techniques for complex systems and situations.
- Value Proposition: Articulates the value and gains commitment to moderately complex technology-oriented solutions, aligning with business needs.
- Effective Research: Conducts thorough research using various sources, including literature and media, to inform decision-making.
- Logical and Creative Problem-Solving: Applies logical thinking and creativity to effectively solve problems in diverse contexts.
- Security Mindset: Demonstrates a 'security mindset,' understanding both defensive and offensive aspects of cybersecurity practices.
These skills are fundamental for success in the dynamic field of cyber security, enabling professionals to navigate challenges and contribute effectively to organisational objectives.
Behavioural Expectations
- Professional Conduct: Demonstrates adherence to business disciplines, ethical standards, and professional courtesies. Maintains timeliness and focus amidst distractions, ensuring tasks are completed to high-quality standards within designated deadlines.
- Flexibility and Resilience: Exhibits a flexible attitude and adeptness in performing under pressure. Adapts to changing circumstances and challenges while maintaining composure and effectiveness.
- Thoroughness in Work: Approaches tasks in the cyber security role with meticulous attention to detail and thoroughness. Ensures comprehensive understanding and execution of responsibilities to uphold security standards and mitigate risks
Qualifications and Professional Recognition
- Qualification: BSc (Hons) Cyber Security Technical Professional Degree. Apprentices without Level 2 English and maths must achieve this prior to taking the end-point assessment.
- Professional Recognition: Recognised for entry to Institute of Information Security Professionals membership at Associate level.
Duration and Level of the Apprenticeship
Duration: Typically 48 months.
Level: Level 6 Degree Apprenticeship.
Review Date
This standard will be reviewed three years from the publication date.
Please note that the above information provides an overview of the apprenticeship program and standards. For comprehensive details, it is advisable to refer directly to the official documentation.