Cyber Essentials Analyst

Focus Group is looking for a customer-focused Cyber Essentials Analyst to join our growing Managed Security Services team. This is an excellent opportunity for a security professional with a strong technical background and a passion for helping customers improve their cyber security posture. As a Cyber Essentials Analyst, you’ll work directly with organisations across a variety of sectors, guiding them through the complete Cyber Essentials (CE) and Cyber Essentials Plus (CE+) certification journey. You’ll assess environments, identify compliance gaps, recommend practical improvements, and support customers in achieving and maintaining certification against UK Government-backed security standards. This role offers the perfect blend of technical security expertise, consultancy, and customer engagement, making it ideal for someone who enjoys solving problems and building trusted relationships., Working closely with customers, internal engineering teams, service delivery teams, and external auditors, you’ll provide expert guidance throughout the Cyber Essentials certification process. You’ll help organisations understand security requirements, implement necessary controls, and improve their overall security posture beyond basic compliance. You’ll play a key role in expanding Focus Group’s cyber assurance services while helping customers reduce risk and strengthen their security foundations., * Lead customers through the full Cyber Essentials and Cyber Essentials Plus certification lifecycle.

• Conduct readiness assessments across the five Cyber Essentials control areas:
• Firewalls
• Secure Configuration
• User Access Control
• Malware Protection
• Patch Management
• Identify compliance gaps and provide clear, risk-based remediation recommendations.
• Support customers with configuration changes, policy enablement, security baselines, and certification readiness activities.
• Coordinate remediation activities with internal Support and Engineering teams where specialist expertise is required.
• Prepare and maintain evidence packs, technical documentation, screenshots, and supporting materials for IASME submissions.
• Provide clear, practical guidance to technical and non-technical stakeholders.
• Support Cyber Essentials Plus audits and coordinate the resolution of any findings.
• Stay up to date with changes to Cyber Essentials requirements, security best practices, and the evolving threat landscape.
• Identify opportunities for customers to further strengthen their security posture.
• Contribute to process improvements, templates, documentation, and service delivery methodologies.
• Support the development of automated compliance and reporting capabilities.
• Work with internal teams to identify opportunities for customers to benefit from additional security services.

• Experience working in IT Infrastructure, Systems Administration, Cyber Security, Managed Services, or a similar technical environment.
• Strong knowledge of Microsoft 365 and Azure administration, including tenant security and conditional access.
• Experience working with endpoint management and patching solutions such as Microsoft Intune, Datto RMM, or similar platforms.
• Good understanding of network architecture, firewall technologies, and security controls.
• Experience with endpoint protection technologies such as Microsoft Defender, Bitdefender, or equivalent solutions.
• Understanding of vulnerability management and security remediation processes.
• Knowledge of security hardening standards and security best practices.
• Excellent written and verbal communication skills.
• Ability to explain technical security concepts in a clear and accessible way.
• Strong organisational skills with excellent attention to detail and documentation standards.
• Ability to manage multiple customer engagements and competing priorities.
• Self-motivated with the ability to work independently and collaboratively.
• Willingness to undertake occasional customer site visits.

Desirable Skills

• Previous experience supporting or delivering Cyber Essentials and Cyber Essentials Plus assessments.
• Knowledge of security frameworks such as ISO 27001, SOC 2, or the NCSC Cyber Assessment Framework (CAF).
• Relevant certifications such as:
• CompTIA Security+
• Microsoft SC-900
• IASME Cyber Essentials Practitioner
• Experience using ITSM platforms such as ServiceNow or similar ticketing systems.
• Familiarity with documentation and configuration management platforms such as IT Glue or Hudu.
• Understanding of cyber risk assessment and risk management methodologies.
• Exposure to Security Operations Centres (SOC), SIEM platforms, MDR, EDR, or XDR services.
• Knowledge of security automation and compliance monitoring tools.

About Focus Group

Established in 2003, we’re proud to be one of the UK’s leading independent providers of essential business technology. At Focus Group you can be proud of what you do, how you do it and feel a true part of the team. We work hard to create an inclusive, collaborative and rewarding environment where you are inspired to achieve brilliant things and really make a difference to the future of our business. Ultimately, we’re proud to have built a successful business which is also an outstanding place to work. A workplace where people thrive, where they can express themselves, have fun, create careers and feel recognised for their achievements.