Cybersecurity Analyst

Our client is seeking a Cyber Security Analyst to support the day to day operation and enhancement of their cyber security function. This role offers broad exposure across vulnerability management, identity and access management (IAM), incident response, security operations, access governance, and security awareness programmes. The successful candidate will work closely with technical and business stakeholders across the organisation to strengthen security controls, support policy development, conduct vendor risk assessments, and contribute to a variety of strategic security initiatives. Experience within a financial services environment is advantageous.

Key Responsibilities

• Manage the vulnerability management lifecycle, including tracking findings through to remediation, prioritising risks, and reporting on remediation progress.
• Conduct regular user and privileged access reviews to ensure appropriate access controls and adherence to least-privilege principles.
• Support IAM processes, including user provisioning, deprovisioning, and access policy enforcement.
• Perform day-to-day security monitoring, operational support, and routine security investigations.
• Coordinate security awareness training programmes and phishing simulations, analysing outcomes and driving improvements.
• Triage and respond to security alerts and incident escalations from third-party detection and response providers, ensuring timely resolution and escalation where necessary.
• Take ownership of operational security tasks and recurring analyst responsibilities to support the wider security team.
• Build strong working relationships with stakeholders across the business to promote security best practices.
• Support the development and maintenance of security policies, standards, and procedures.
• Participate in vendor security due diligence and third-party risk assessments.
• Assist with security projects and strategic initiatives as directed by senior security leadership.

Requirements

• 3-5 years of experience within cyber security, information security, or infrastructure-focused roles.
• Previous experience within financial services is beneficial but not essential.
• Strong ability to manage multiple priorities and work effectively in a fast-paced environment.
• Experience with source control and pipeline security (GitSecOps) is desirable.
• Solid understanding of core security principles, including network protocols, firewalls, common attack vectors, vulnerability management, and risk management.
• Professional certifications such as CompTIA Security+, CISSP, or CISM are advantageous.
• Proven ability to collaborate effectively with both technical and non-technical stakeholders.