> Markdown version of [/jobs/ext/4072902-cyber-security-analyst-iso-27001](https://www.wearedevelopers.com/jobs/ext/4072902-cyber-security-analyst-iso-27001). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Analyst - ISO 27001

- **Company:** Applause IT
- **Location:** UK (Remote available)
- **Experience:** Expert
- **Salary:** £40,000 - £45,000
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Open Web Application Security, Anti-Phishing, Runbook, Security Information and Event Management, Software Vulnerability Management, Microsoft InTune, Qualys, Vulnerability Analysis
- **Published:** October 26, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=6e8c0ba049c2c358

## About the Role

* Solid hands-on experience in IT security or security operations
 * Experience coordinating security incidents under pressure
 * Working knowledge of ISO 27001 and Cyber Essentials Plus, ideally including external audits
 * Working knowledge of vulnerability scanners and SIEM tools, plus OWASP principles
 * Clear written communication for incident notes and audit evidence
 * Experience with Drata, Vanta or similar, or with ISO 22301, is a plus

Tech stack: Defender XDR, Entra ID, Intune, Purview, InsightIDR, Qualys, Wiz, Drata, SecurityScorecard

## Description

You'll report to the Group Security Operations Manager and join a team with a busy two years ahead. The business has ISO 27001, ISO 22301 and Cyber Essentials Plus audits this year and next, and is moving its compliance work onto Drata. You'll be central to both, and your work will be visible from day one.

What you'll be doing

 * Coordinating the response to major security incidents, from severity assessment and stakeholder updates through to recovery and post-incident review
 * Preparing for ISO 27001, ISO 22301 and Cyber Essentials Plus audits, including evidence, control walkthroughs and tracking non-conformances to closure
 * Running control reviews in Drata and helping shape how the platform is used
 * Overseeing vulnerability management in Qualys and Wiz, and driving fixes with technical owners
 * Overseeing vendor assurance, phishing simulation and security training completion
 * Supporting less experienced colleagues and improving runbooks, dashboards and automation