Cyber Security Analyst

Cyber Security Analyst – Remote (UK) – ISO 27001, Incident Response

Location: UK (Remote, occasional office travel)

Job type: Permanent, Full-time

If you’ve coordinated real security incidents and prepared evidence for an ISO 27001 audit, this role will use both from day one.

An established, international software and data business serving government, public services and regulated industries is hiring a Cyber Security Analyst . Its customers depend on its certifications, so this is a role where security is central to the business.

Why now

The team has a busy two years ahead. There are ISO 27001, ISO 22301 and Cyber Essentials Plus audits this year and next, and the team is moving its compliance work onto Drata . You’d be joining as a key part of both, reporting to the Group Security Operations Manager.

What you’ll be doing

• Coordinating major security incidents, from severity assessment and stakeholder updates through to recovery and post-incident review
• Preparing audit evidence and control walkthroughs, and tracking non-conformances to closure
• Running control reviews in Drata and helping shape how the platform is used
• Overseeing vulnerability management in Qualys and Wiz
• Overseeing vendor assurance, phishing simulation and security training
• Guiding less experienced colleagues and improving runbooks and automation

What you’ll bring

• Solid hands-on experience in cyber security or security operations
• Experience coordinating security incidents under pressure
• Working knowledge of ISO 27001 and Cyber Essentials Plus
• Familiarity with vulnerability scanners, SIEM and OWASP principles
• Experience with Drata , Vanta or a similar platform is a plus

Tech stack: Defender XDR, Entra ID, Intune, Purview, InsightIDR, Qualys, Wiz, Drata, SecurityScorecard

What’s on offer

• Fully remote within the UK
• Private healthcare, 4x life assurance and income protection at 75% of salary
• Salary exchange pension and a share scheme with matching sharesMentoring and leadership development
• Real influence over how the team’s compliance tooling takes shape