Information Security Analyst
Information Security Analyst
Farnborough | Hybrid | Circa £50,000
We are recruiting for an Information Security Analyst to join a growing organisation based in Farnborough.
This is a varied role combining information security, ISO 27001, data protection and hands-on technical support. You’ll work closely with internal teams and customers, helping to resolve technical issues while ensuring that security, confidentiality and compliance remain at the heart of every interaction.
The role
You will be responsible for:
- Troubleshooting hardware, software and network-related issues
- Identifying, triaging and escalating potential security incidents
- Ensuring support activities follow ISO 27001 and data protection requirements
- Maintaining accurate documentation and audit trails
- Supporting the implementation of security controls and best practice
- Identifying gaps in security processes and recommending improvements
- Working closely with Customer Service, Field Teams, Information Security and Data Protection colleagues
- Communicating technical and security issues clearly to both technical and non-technical stakeholders
- Supporting continuous improvement across security procedures and working practices
What we’re looking for
You’ll ideally have:
- Previous experience within Information Security, technical support, infrastructure support or a similar environment
- Good knowledge of ISO 27001
- Understanding of GDPR and data protection principles
- Experience troubleshooting hardware, software and network issues
- Knowledge of networking, cloud security and general IT security
- Strong incident triage and problem-solving skills
- Excellent written and verbal communication skills
- Strong attention to detail and organisation
Certifications such as CompTIA Security+, CISSP Associate or ISO 27001 Lead Implementer/Auditor would be advantageous but are not essential.
Security clearance
Successful security clearance and vetting will be required for this position.
This would suit someone who enjoys being technically hands-on but also wants exposure to cyber security, ISO 27001, compliance and incident management, rather than working in a purely GRC-focused position