Cyber Security Analyst - ISO 27001

You’ll report to the Group Security Operations Manager and join a team with a busy two years ahead. The business has ISO 27001, ISO 22301 and Cyber Essentials Plus audits this year and next, and is moving its compliance work onto Drata. You’ll be central to both, and your work will be visible from day one.

What you’ll be doing

• Coordinating the response to major security incidents, from severity assessment and stakeholder updates through to recovery and post-incident review
• Preparing for ISO 27001, ISO 22301 and Cyber Essentials Plus audits, including evidence, control walkthroughs and tracking non-conformances to closure
• Running control reviews in Drata and helping shape how the platform is used
• Overseeing vulnerability management in Qualys and Wiz, and driving fixes with technical owners
• Overseeing vendor assurance, phishing simulation and security training completion
• Supporting less experienced colleagues and improving runbooks, dashboards and automation

• Solid hands-on experience in IT security or security operations
• Experience coordinating security incidents under pressure
• Working knowledge of ISO 27001 and Cyber Essentials Plus, ideally including external audits
• Working knowledge of vulnerability scanners and SIEM tools, plus OWASP principles
• Clear written communication for incident notes and audit evidence
• Experience with Drata, Vanta or similar, or with ISO 22301, is a plus

Tech stack: Defender XDR, Entra ID, Intune, Purview, InsightIDR, Qualys, Wiz, Drata, SecurityScorecard

• Fully home-based within the UK
• Private healthcare, 4x life assurance and income protection at 75% of salary
• Salary exchange pension and a share scheme with matching shares
• Mentoring and leadership development
• A real hand in shaping the team’s compliance tooling

Apply now for a confidential conversation. Applause IT is managing this search on behalf of the client.

Applause IT Recruitment is acting as an Employment Agency in relation to this vacancy.

Pay: £40,000.00-£45,000.00 per year

An established, international software and data business serving government, public services and regulated industries is hiring a Cyber Security Analyst. This is a senior hands-on role covering major incident coordination and ISO 27001 audit work. It suits someone who wants real ownership rather than working through a ticket queue.