Cyber Security Apprentice

Summary

Starting in March 2025, we are currently looking for a motivated Apprentice to join our Global Information Security (GIS) team in Chester in a full-time role whilst studying the Cyber Security pathway of the Level 6 Digital and Technology Solutions degree apprenticeship.

Annual wage: Competitive
Minimum wage rates (opens in new tab)
Training course: Digital and technology solutions professional (level 6)
Hours: Monday to Friday, 9.00am to 5.00pm.
35 hours a week
Possible start date: Monday 24 March
Duration: 3 years
Positions available: 1

Work

As an apprentice, you’ll work at a company and get hands-on experience. You’ll gain new skills and work alongside experienced staff.

What you’ll do at work

Successful apprentices will continuously relate what they are learning with their work at Bank of America, as they progress through their degree programme. Being part of Global Information Security (GIS) offers you the opportunity to be part of a world-class information security workforce.

As an apprentice, you will join one of our teams in GIS EMEA. Key tasks and responsibilities may include but are not limited to:

Building an understanding of the Banks security policy, standards, and requirements
Develop a strong understanding of established processes and guidelines to handle common issues
Accurate documentation, record-keeping, analysis and response to incoming information security inquiries or issues
Monitor assigned queues and work cases in an efficient and effective manner
Collaborate with team members to resolve more complex problems and/or escalate as necessary
Adapt to change and learning of new technology/processes
Supporting technical and non-technical colleagues performing specialised GIS functions to drive operational efficiencies
Partnering and developing key relationships with stakeholders across the team and outside of the team

Where you’ll work

Amadeo Financial Center

Herons Way

Chester Business Park

Chester

CH4 9FE

Training

An apprenticeship includes regular training with a college or other training organisation. At least 20% of your working hours will be spent training or studying.

College or training organisation

ADA NATIONAL COLLEGE FOR DIGITAL SKILLS

Your training course

Digital and technology solutions professional (level 6)

Equal to degree

Course contents

Analyse a business problem to identify the role of digital and technology solutions.

Identify risks, determine mitigation strategies and opportunities for improvement in a digital and technology solutions project.

Analyse a business problem in order to specify an appropriate digital and technology solution.

Initiate, design, code, test and debug a software component for a digital and technology solution.

Apply relevant standard processes, methods, techniques and tools. For example, ISO Standards, Waterfall, Agile in a digital and technology solution project.

Manage digital and technology solutions projects. For example, identifying and resolving deviations from specification, applying appropriate Project Management methodologies.

Work effectively within teams, leading on appropriate digital technology solution activities.

Apply relevant organisational theories. For example, change management principles, marketing approaches, strategic practice, and IT service management to a digital and technology solutions project.

Apply relevant security and resilience techniques to a digital and technology solution. For example, risk assessments, mitigation strategies.

Initiate, design, implement and debug a data product for a digital and technology solution.

Determine and use appropriate data analysis techniques. For example, Text, Statistical, Diagnostic or Predictive Analysis to assess a digital and technology solutions.

Plan, design and manage simple computer networks with an overall focus on the services and capabilities that network infrastructure solutions enable in an organisational context.

Report effectively to colleagues and stakeholders using the appropriate language and style, to meet the needs of the audience concerned.

Research, investigate, and evaluate innovative technologies or approaches in the development of a digital and technology solution.

Apply relevant legal, ethical, social and professional standards to a digital and technology solution.

Identify and define software engineering problems that are non-routine and incompletely specified.

Provide recommendations as to the most appropriate software engineering solution.

Use appropriate analysis methods, approaches and techniques in software engineering projects to deliver an outcome that meets requirements.

Implement software engineering projects using appropriate software engineering methods, approaches and techniques.

Respond to changing priorities and problems arising within software engineering projects by making revised recommendations, and adapting plans as necessary, to fit the scenario being investigated.

Determine, refine, adapt and use appropriate software engineering methods, approaches and techniques to evaluate software engineering project outcomes.

Evaluate learning points arising from software engineering work undertaken on a project including use of methods, analysis undertaken, selection of approach and the outcome achieved, in order to identify both lessons learnt and recommendations for improvements to future projects.

Extend and update software development knowledge with evidence from professional and academic sources by undertaking appropriate research to inform best practice and lead improvements in the organisation.

Analyse client needs and determine how to advise them strategically through improved business processes, new ideas, or technology solutions.

Effectively communicate value add to the client through a variety of media. For example, presentations, written reports, Storytelling in a professional setting through performing socio-technical process improvements in a range of environments.

Make evidence based recommendations taking into account risks, costs, and benefits.

Participate in walk-throughs for Information Technologies, to identify, document and evaluate key risks within a client’s organisation.

Perform stakeholder analysis to identify, determine and deepen understanding of system requirements and develop client relationships.

Effect change within an organisation through evaluation of a new system, process or initiative.

Ensure legal and ethical requirements are accommodated in the development of digital and technology solutions.

Evaluate the success of new systems, processes, or initiatives.

Use requirements elicitation, analysis and documentation to produce an acceptable solution for business problems or further opportunities.

Conduct Process Analysis, Definition, Mapping and Modelling within a business situation without supervision.

Produce Use Cases which are of value to all stakeholders of a system.

Use tools and benchmarking to support modelling and requirements gathering and recommend approaches to team members as required.

Produce a business case to scope a proposed project including business benefits and recommendations.

Use products of analysis in the design and development of a system.

Evaluate the impacts of model selection and how they inter-relate with each other when generating business analytics.

Recommend and use appropriate software tools to implement Business Analysis tasks and outcomes.

Discover, identify and analyse security threats, attack techniques and vulnerabilities and recommend mitigation and security controls.

Undertake security risk assessments for complex systems without direct supervision and propose a remediation strategy relevant to the context of the organisation.

Recommend improvements to the cyber security approaches of an organisation based on research into future potential cyber threats and considering threat trends.

Manage cyber security risk.

Use appropriate cyber security technology, tools and techniques in relation to the risks identified.

Lead cyber security awareness campaigns and evaluate their effectiveness.

Analyse cyber security requirements against other design requirements for systems or products, identify conflicting requirements and recommend appropriate solutions with clear explanation of costs and benefits.

Lead the design and build of systems in accordance with a security case to address organisational challenges.

Define Data Requirements and perform Data Collection, Data Processing and Data Cleansing.

Apply different types of Data Analysis, as appropriate, to drive improvements for specific business problems.

Find, present, communicate and disseminate data analysis outputs effectively and with high impact through creative storytelling, tailoring the message for the audience. Visualise data to tell compelling and actionable narratives by using the best medium for each audience, such as charts, graphs and dashboards.

Identify barriers to effective analysis encountered both by analysts and their stakeholders within data analysis projects.

Apply a range of techniques for analysing quantitative data such as data mining, time series forecasting, algorithms, statistics and modelling techniques to identify and predict trends and patterns in data.

Apply exploratory or confirmatory approaches to analysing data. Validate and and test stability of the results.

Extract data from a range of sources. For example, databases, web services, open data.

Analyse in detail large data sets, using a range of industry standard tools and data analysis methods.

Identify and collate stakeholder needs in relation to computer network requirements, plans and designs.

Plan, design, document, and develop the relevant elements of a computer network within an organisation or between organisations, taking into account customer requirements (performance, scale), constraints (budget, equipment availability), and define policies for their use.

Monitor performance and ensure networks are configured correctly and perform as expected by designers or architects. Undertake capacity management and audit of IP addressing and hosted devices.

Investigate, troubleshoot and resolve data network faults in local and wide area environments, using information from multiple sources, Physically or Remotely by console connection. Recommend and implement short term fixes to restore service and, or, quality of experience and recommend longer term changes to prevent recurrence or reduce impact of future occurrences.

Implement computer networks from a design including testing and validation. This includes populating variables in configurations, for example, IP addresses and subsequent application of configuration to equipment such as routers, switches, firewalls.

Secure network systems by establishing and enforcing policies, and defining and monitoring access. Support and administer firewall environments in line with IT security policy.

Research and evaluate emerging network technologies and assess relevance to current network requirements. Provide an objective opinion on how new features and technologies may be incorporated as required by the organisation.

Investigate security concerns or attacks. For example, Distributed Denial of Service (DDOS), port scanning, assessing key metrics and indicators, evidencing the chosen steps to mitigate.