> Markdown version of [/jobs/ext/1925037-it-security-analyst](https://www.wearedevelopers.com/jobs/ext/1925037-it-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Analyst - **Company:** Hays plc - **Location:** Fetcham, UK - **Salary:** £50,000.0 - £60,000.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Phishing - **Published:** August 5, 2026 - **Apply:** https://jobsthamesvalley.co.uk/jobs/apply/ats-redirect/?id=2909649224-2 ## About the Role * Standards and framework knowledge - mainly ISO27K and CE/CE+ * Experience working with Microsoft Purview DLP * Experience of creating playbooks for Sentinel/Defender and reviewing policies * Technical skills and strong communication skills * Willingness to get stuck in and converse with other business departments. * Experience with risk assessments * Knowledge of cloud security principles * To undergo a BPSS security check. ## Description A leading construction and development company in Surrey are currently looking for an IT Security Analyst to come in and support the existing IT Security Manager with the day-to-day tasks involved with the running of the IT Security infrastructure for the organisation. You will also assist with creating and maintaining security policies, supporting operational processes, and developing security awareness initiatives., You will be supporting the IT Security Manager across a broad variety of work, with the ability to gain a lot of different experience across multiple areas. Crucially, this role requires strong experience with security awareness and phishing campaigns, as well as previous experience having implemented and maintained infosec policies and procedures. This is not a SOC role. * Cyber security awareness and training * Policy development and compliance * Risk assessment and testing * Stakeholder collaboration and communication * Security operations and IR ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)