Security Analyst

Information Security Analyst

Salary: £55,000 + Benefits

We're looking for an ambitious Information Security Analyst to join our growing security team. This is a hands-on role for someone who wants to build their career across governance, compliance, risk and security assurance while taking ownership of key security initiatives.

You'll play a central role in maintaining Cyber Essentials Plus certification, supporting ISO 27001, improving security processes, and helping embed a strong security culture across the business.

What you'll be doing

• Own the day-to-day management and maintenance of Cyber Essentials Plus certification.
• Support ISO 27001 implementation, audits and continual improvement activities.
• Coordinate security evidence, documentation and compliance activities.
• Maintain security policies, standards and procedures.
• Manage security questionnaires, supplier due diligence and audit requests.
• Track security risks, remediation actions and compliance activities.
• Support vulnerability remediation and security control improvements.
• Help deliver security awareness initiatives across the business.
• Research emerging threats, security best practice and regulatory developments.

What we're looking for

• Experience working in an Information Security, Cyber Security or GRC role.
• Good understanding of Cyber Essentials Plus and security compliance principles.
• Knowledge of security controls including patch management, endpoint security, access management and secure configuration.
• Strong organisational skills with excellent attention to detail.
• Confident writing policies, documenting processes and communicating with stakeholders.
• A proactive, curious mindset with a genuine desire to learn and solve problems.

Nice to have

• Exposure to ISO 27001.
• Experience supporting audits, risk management or governance activities.
• Security certifications such as CompTIA Security+, ISO 27001 Foundation or similar.