Security Analyst (T-ISAC)

Department: Fraud and Security Team: T-ISAC Location: London with hybrid ways of working Position type: Permanent What the hiring manager says The GSMA is expanding the T-ISAC Team and looking for a candidate with a passion to provide intelligence analytical expertise that will provide unrivalled value to our mobile network operators. If you have proven experience in finding the truth behind the noise and can articulate the ‘So What’ to senior telecoms defence specialists across the disciplines of cyber, networking and fraud / scams, you would be welcome to join GSMA T-ISAC and help make a real-world difference to combat our adversaries. Matthew Roach, T-ISAC Engagement Manager About the Team & T-ISAC The GSMA is at the heart of the modern mobile communications ecosystem. These systems are rightly considered critical to national infrastructure, and our members defend themselves and their consumers from cyber, networking and fraud / scam attacks every minute of every day. The T-ISAC team brings together the defence analysts from across the mobile world to share intelligence and produce actionable, timely and relevant outputs that help ensure the resilience and operational strength of our communication infrastructure. We believe that threat detection from one mobile network operator should serve to help to better defend industry peers and consumers. The Telecommunication Information Sharing and Analysis Center (T-ISAC) is the cybersecurity threat intelligence community for the telecommunication industry, dedicated to facilitating collaboration and intelligence sharing among mobile network operators, mobile virtual network operators and industry stakeholders. T-ISAC provides GSMA members with critical cyber threat intelligence, fostering a trusted environment where telecommunication stakeholders can proactively address cybersecurity threats and reduce risks through the development of best practices. By uniting telecommunication MNOs, MVNOs, manufacturers, service providers and industry in a shared mission, T-ISAC enhances the mobile ecosystem’s resilience against cyber threats. For more information, visit www.gsma.com/T-ISAC . About the role As the Security Analyst (T-ISAC) you will be driving T-ISAC threat intel sharing platform’s day-to-day, combining sensitive source data with open-source insights and telecoms professional knowledge from the wider telecoms and cyber security community to facilitate intelligence exchange, capture emerging attack trends and translate insights into actionable intelligence for strategic decision-makers. The role will analyse data across T-ISAC’s intelligence platforms to identify thematic threats to global mobile networks and consumers, while supporting sector-wide incident coordination, information sharing, threat monitoring and resilience activities. Working independently and as part of a small team, as the Analyst you will collaborate with internal teams, subject matter experts and leadership to deliver strategic initiatives aligned with organisational priorities and T-ISAC member needs. Drawing on a detailed understanding of attacker tools, techniques and procedures, threat actor behaviour and the cyber, network and fraud landscape, the role will produce high-quality intelligence products and clearly translate technical indicators, methodologies and potential impacts for both specialist and business audiences. About You Within T-ISAC, you will gain global visibility of the threats facing the mobile network providers. You will use your strategic report writing abilities to convey valuable intelligence and industry-wide insights, detailing of the threat landscape to key strategic decision makers and budget holders. You have an understanding of the fundamentals of telecoms network security and defence across SS7, Diameter and GTP-C using signalling firewalls and intrusion detection systems. You will need to have practitioner-level ability in suing MISP and other telecoms security tools, as well as basic coding ability in Python, Linux and building API integration to enable data exchange. You are a big-picture thinker with a strong analytical mindset and hand-on experience in high performing analytical teams, ideally with a telecoms background. You are mindful of geo-political impact and the motivations of adversaries as they carry out attacks across or directed at mobile networks. You are self-motivated and highly organized with strong attention to detail and the ability to independently manage responsibilities and deliver results. About your skills You will bring a blend of core competency and technical skills to the role and may be assessed against them. These will include - Stakeholder Management - Strong stakeholder management skills, with the ability to work effectively across technical and non-technical teams, as well as building and maintaining relationships with senior leaders, subject matter experts, members, regulators, and external stakeholders. Analytical & Problem Solving - Strong analytical and problem-solving skills, with the ability to synthesise information, identify trends, assess risks, and develop actionable recommendations. Communication - Excellent written, verbal, presentation, and facilitation skills, with the ability to communicate effectively with technical and non-technical audiences. Teamwork - Strong interpersonal skills, sound judgement, and the ability to work effectively with individuals from diverse backgrounds and cultures. Technical Skills - A strong technical knowledge in cyber, network and fraud defence in the context of mobile networks to produce end-to-end threat reporting with the ability to plan, research, document and follow up on threat reporting activities with a high degree of independence. Ability to manage your workload with a good degree of independence, build familiarity with relevant industry practices and procedures, and take an active role in your ongoing development with support from your line manager and colleague. Ability to produce high-quality, insightful strategic threat reporting from a full range of sources from technical to geo-political that provide senior decision makers and C-Suite audiences with demonstrable value. You will have a solid understanding of global security frameworks and standards, such as NIST, ISO and MITRE ATT&CK & MITRE FiGHT. We strive to offer a meaningful and inclusive application experience for all candidates. Should you require any accommodations or adjustments due to a disability or for any other reason during the hiring process, please contact talent@gsma.com with your request. Contract type Regular Worker type Employee What We Offer Working at the GSMA offers you unparalleled access to the mobile industry. We offer a chance to truly shape the direction of mobile, whatever your role. By joining the GSMA, you will be exposed to a fast-paced rapidly evolving environment, working on global solutions, genuinely fascinating and industry-changing projects and a stimulating and dynamic environment designed to enable you to flourish. In addition to architect-designed offices and competitive compensation, our benefits include fantastic learning & development opportunities, generous holiday allowances, four additional days off for professional development and many others. To learn more about the GSMA, visit our career site , our LinkedIn page and our Twitter page. Being You at the GSMA We care deeply about diversity, equity and inclusivity and aspire to be the best at it. Your well-being and work/life balance is important, so flexi-time and remote working is available to all staff. We're keen to ensure everyone is equal, represented and connected so we particularly encourage applications from all demographics. The sucess of the GSMA year on year will continue to be contributed by people from all walks of life.