> Markdown version of [/jobs/ext/2785760-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/2785760-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst

- **Company:** Zuto Limited
- **Location:** Manchester, UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Cloud Computing Security, Cyber Security, Query Languages, Identity and Access Management, JSON, Network Security, Log Analysis, Machine Learning, Windows PowerShell, Security Information and Event Management, Software Vulnerability Management, EndPointSecurity, Scripting, Microsoft Power Automate, Data Management, CIS Benchmarks
- **Published:** September 8, 2026
- **Apply:** https://careers.zuto.com/jobs/8332458-senior-information-security-analyst

## About the Role

* Substantial experience working within an Information or Cyber Security role.
 * Strong hands-on technical capability across several areas such as:
 + SIEM & log analysis
 + Endpoint Detection & Response
 + Vulnerability management
 + AWS/cloud security
 + Identity & Access Management
 + Email & network security
 * Practical experience taking a senior role in security incident investigation and response.
 * Experience overseeing infrastructure and cloud vulnerability management programmes.
 * Working knowledge of ISO 27001 and experience demonstrating control effectiveness.

Nice to Have

 * Experience within UK financial services, consumer credit, lending or another FCA-regulated environment.
 * Knowledge of security frameworks such as NIST CSF, CIS Controls or NCSC CAF.
 * Scripting or automation experience using tools such as PowerShell, Power Automate, JSON or query languages., A degree in a computer-related subject or equivalent professional experience within cyber security would be beneficial.

## Description

As our Senior Information Security Analyst, you'll play a key role in protecting Zuto's technology, data and customers while helping us continue to mature our overall security posture.

This is a blended technical security and governance role. One day you could be investigating an alert within our SIEM or responding to a security incident; the next, you could be assessing a supplier, supporting an ISO 27001 audit or discussing a control decision with senior stakeholders.

You'll act as a senior point of reference for colleagues across the business, combining strong technical knowledge with a practical, risk-based approach to security.

We're looking for someone who can distinguish genuine risk from noise, make sound decisions and help us continuously improve rather than simply identify problems.

What You'll be Doing

Security Operations & Incident Response

 * Managing day-to-day security alerts, requests and tickets through to resolution, ensuring SLAs are achieved.
 * Acting as a senior responder for security incidents, supporting investigation, containment and resolution.

Vulnerability & Threat Management

 * Owning the end-to-end vulnerability management lifecycle, from scanning and validation through to prioritisation, remediation and reporting.
 * Managing internal and external penetration testing and working with Engineering teams to resolve findings.

Identity, Cloud & Technical Security

 * Assuring Identity and Access Management controls including MFA, privileged access, RBAC and joiner/mover/leaver processes.
 * Supporting periodic access reviews and recertification.
 * Providing security input into cloud architecture, network segmentation, logging and encryption.

AI & Emerging Talent

 * Assessing the security implications of new and emerging technologies, including AI and machine-learning tools.
 * Helping ensure appropriate data-handling safeguards and human oversight are built into AI adoption.

What you'll need

We're looking for someone with genuine breadth across technical information security and governance, risk and compliance.


## Related Videos

- [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Progressive Delivery in Kubernetes](https://www.wearedevelopers.com/videos/949-progressive-delivery-in-kubernetes)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Introducing JSON Structure](https://www.wearedevelopers.com/videos/100219-introducing-json-structure)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)