Information Security Analyst

Responsibilities

• Security Operations
• Monitor and investigate security alerts and events across security tooling, cloud environments, business systems, and applications.
• Support incident response activities including detection, analysis, containment, eradication, recovery, and lessons learned.
• Develop and improve security monitoring, alerting, playbooks, and operational procedures.
• Assist with threat hunting and proactive identification of security risks and suspicious activity.
• Maintain awareness of emerging cyber threats, vulnerabilities, and attack techniques relevant to SaaS businesses.
• Vulnerability Management
• Own day-to-day vulnerability management activities across infrastructure, cloud platforms, applications, and endpoints.
• Work with technology teams to prioritise and coordinate remediation activities.
• Track vulnerabilities through to resolution and provide reporting on remediation performance.
• Support penetration testing activities and coordinate remediation of findings.
• Cloud & Identity Security
• Support the security of cloud environments and SaaS platforms through implementation and monitoring of security controls.
• Assist with identity and access management initiatives, including privileged access management, role-based access control, and identity governance.
• Review cloud security recommendations and assist with remediation activities.
• Support security assessments of new technologies, platforms, and services.
• Application Security
• Partner with engineering teams to support secure software development practices.
• Assist with the identification, triage, and remediation of application security vulnerabilities.
• Support security testing activities including SAST, DAST, dependency scanning, and secrets detection.
• Contribute to threat modelling and secure design discussions where appropriate.
• Governance, Risk & Compliance
• Support the continued operation and improvement of the Information Security Management System (ISMS).
• Assist with security audits, compliance activities, evidence collection, and control reviews.
• Contribute to the development and maintenance of security policies, standards, procedures, and guidance.
• Support risk assessments and assist with tracking risk treatment activities.
• Help maintain compliance with frameworks and standards including ISO 27001 and applicable data protection requirements.
• Customer & Vendor Assurance
• Respond to customer and prospect security questionnaires and due diligence requests.
• Support customer trust and assurance initiatives.
• Conduct security reviews of suppliers, partners, and third-party services.
• Maintain positive relationships with vendors and service providers.
• Reporting & Awareness
• Produce security metrics, dashboards, and management reporting.
• Support security awareness and education initiatives across the business.
• Promote a positive security culture and help teams understand and manage risk effectively.

About You

Interview Process

Some of Our Global Benefits

• Commission & bonus opportunities
• Annual leave that increases with service + option to buy more
• Additional paid wellbeing days + annual wellbeing reward
• Christmas office shutdown (extra time off)
• Enhanced parental leave & family support policies
• Employee recognition & reward schemes
• Referral bonuses & long-service rewards

Authenticity in Our Hiring Process

DEI commitment

Legal statement