> Markdown version of [/jobs/ext/2064671-senior-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/2064671-senior-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Information Security Analyst - **Company:** Sopra Steria Limited - **Location:** Leeds, UK - **Experience:** Expert - **Salary:** £59,075.0 - **Contract:** Permanent contract - **Skills:** Data Analysis, Cloud Computing Security, Cyber Security, Identity and Access Management, PCI Data Security Standards, Cloud Services, Software Vulnerability Management - **Published:** August 15, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5830784875 ## About the Role Are you passionate about cyber security, technically minded and interested in understanding how security controls should be applied across complex IT environments? We're looking for a Senior Information Security Analyst to help strengthen and protect our technology landscape, ensuring the security and resilience of critical systems and services that support the NHS. This role would suit someone with strong information security experience who can apply sound security judgement across technical environments. You'll work with technical and business teams to identify risks, improve security controls and help ensure security best practice is embedded across our technology environment., * Previous experience in an Information Security Analyst, cyber security or similar role, with the technical understanding needed to assess risks, recommend controls and support secure implementation across IT environments. * Good understanding of enterprise IT environments and the security controls used to protect them. * An understanding of how security principles and controls are applied in practice. * Practical experience in one or more security areas such as vulnerability management, Identity and Access Management, endpoint security, cloud security, security monitoring or incident response. * The ability to understand technical issues, assess security risk and recommend practical and proportionate solutions. * Strong analytical and problem-solving skills. * Confidence working with technical and business teams to discuss security requirements, risks and remediation. * Awareness of recognised cyber security frameworks and standards, such as ISO 27001, NIST Cybersecurity Framework and PCI DSS, and an understanding of the role they play in supporting good security practice. * A proactive approach to learning and developing your information security knowledge. You do not need to be an expert in every area of cyber security. We're particularly interested in people with strong security judgement, good technical understanding, strong problem-solving skills and a passion for developing their career in information security. ## Description * Providing information security advice across infrastructure, networks, systems, cloud services and applications. * Assessing technologies, solutions and changes to identify security risks and recommend appropriate controls. * Working with technical teams to implement and improve security controls and security best practice. * Identifying security control gaps and recommending proportionate improvements. * Analysing vulnerabilities, assessing their technical impact and working with relevant teams to support effective remediation. * Supporting security-by-design activities across projects, technical changes and new solutions. * Reviewing technical configurations and proposed solutions from an information security perspective. * Supporting the management and improvement of Identity and Access Management controls, including privileged access and inappropriate access risks. * Investigating security incidents and providing analysis and recommendations. * Evaluating existing and emerging security technologies and recommending improvements. * Researching emerging cyber threats, vulnerabilities and security trends and considering their potential impact on the organisation. * Supporting internal and external security audits by providing information security expertise and evidence. * Producing clear security reports, recommendations and updates for both technical and non-technical audiences. * Helping continuously improve security standards, processes, controls and ways of working across the organisation. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Data Science in Retail](https://www.wearedevelopers.com/videos/586-data-science-in-retail) - [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Software Engineer Salary in The UK](https://www.wearedevelopers.com/magazine/231-software-engineer-salary-in-the-uk) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [Fullstack Developer Salary UK](https://www.wearedevelopers.com/magazine/251-fullstack-developer-salary-uk)