Information Security Analyst

We are looking for an Information Security Analyst to support the delivery of our cyber security strategy and protect the organisation from evolving threats.

Reporting to the Information Security Manager, you will play a key role in monitoring threats, responding to incidents, and strengthening our security posture across both IT and operational environments.

This is an excellent opportunity for a security professional who enjoys hands-on technical work, cross-functional collaboration, and continuous improvement., * Support the development and implementation of information security policies, procedures and standards

• Monitor security tools (SIEM, endpoint protection, etc.) and investigate security alerts and incidents
• Conduct security assessments, audits, and risk analyses to identify vulnerabilities
• Collaborate with IT and business teams to implement effective security controls
• Assist in incident response activities (containment, eradication, recovery)
• Contribute to disaster recovery and business continuity planning
• Deliver security awareness training to promote a strong security culture
• Support internal/external audits, penetration testing, and compliance reviews
• Maintain accurate security documentation, risk registers and treatment plans
• Work with third-party suppliers to assess and manage security risks
• Stay up to date with emerging threats and recommend improvements

Do you have experience in SIEM?, * Experience in an Information Security / Cyber Security role

• Relevant certification such as CISSP, CISM, CompTIA Security+ or CEH
• Knowledge of security frameworks (e.g. ISO 27001, NIST, CIS Controls)
• Understanding of network security principles and technologies
• Experience with tools such as SIEM, IDS/IPS, firewalls, endpoint protection
• Experience conducting security assessments and risk analysis
• Strong analytical and problem-solving skills
• Ability to manage and respond to security incidents
• Excellent communication skills, with the ability to explain technical concepts clearly, * Experience in a regulated or critical infrastructure environment
• Familiarity with GDPR and data protection regulations
• Exposure to penetration testing and vulnerability management tools