Cyber Essentials Analyst

Focus Group; Manchester; Hybrid; GBP 35,000 - 40,000; Full time

Benefits offered by this job

Holiday allowance

Hybrid working

Parental leave

Volunteer day

Company benefits

Job summary

Focus Group is seeking a Cyber Essentials Analyst to guide organisations through Cyber Essentials and Cyber Essentials Plus certification. You will assess environments, identify gaps, and help build a secure posture beyond basic compliance.

The role blends technical security expertise with consultancy and customer interaction. Hybrid working arrangement with Manchester as a reference location; permanent position with a salary in the £35,000–£40,000 range.

Qualifications

• Experience in IT infrastructure, security, or managed services.
• Strong knowledge of Microsoft 365 and Azure administration, including tenant security.
• Experience with endpoint management and patching tools such as Intune or Datto RMM.
• Clear understanding of firewall technologies and security controls.
• Ability to explain security concepts to technical and non-technical stakeholders.

Responsibilities

• Lead customers through Cyber Essentials and CE+ certification lifecycle.
• Perform readiness assessments across five CE control areas.
• Identify gaps and provide remediation recommendations.
• Coordinate with internal teams and auditors for certification readiness.
• Prepare evidence packs and documentation for IASME submissions.
• Stay updated on CE requirements and best practices.

Skills

IT infra

Cyber security

Communication

Documentation

Independence

Tools

Microsoft 365

Azure

Intune

Datto RMM

Microsoft Defender

Job description

Cyber Essentials Analyst

Department: Technical Operations

Employment Type: Permanent

Location: Multiple Locations

Compensation: £35,000 - £40,000 / year

Description

Location: Hybrid / Manchester
Salary: Competitive
Contract: Permanent

Focus Group is looking for a customer-focused Cyber Essentials Analyst to join our growing Managed Security Services team. This is an excellent opportunity for a security professional with a strong technical background and a passion for helping customers improve their cyber security posture.

As a Cyber Essentials Analyst, you'll work directly with organisations across a variety of sectors, guiding them through the complete Cyber Essentials (CE) and Cyber Essentials Plus (CE+) certification journey. You'll assess environments, identify compliance gaps, recommend practical improvements, and support customers in achieving and maintaining certification against UK Government-backed security standards.

This role offers the perfect blend of technical security expertise, consultancy, and customer engagement, making it ideal for someone who enjoys solving problems and building trusted relationships.

Key Responsibilities

Working closely with customers, internal engineering teams, service delivery teams, and external auditors, you'll provide expert guidance throughout the Cyber Essentials certification process. You'll help organisations understand security requirements, implement necessary controls, and improve their overall security posture beyond basic compliance.

You'll play a key role in expanding Focus Group's cyber assurance services while helping customers reduce risk and strengthen their security foundations.

• Lead customers through the full Cyber Essentials and Cyber Essentials Plus certification lifecycle.
• Conduct readiness assessments across the five Cyber Essentials control areas:
  • Firewalls
  • Secure Configuration
  • User Access Control
  • Malware Protection
  • Patch Management
• Identify compliance gaps and provide clear, risk-based remediation recommendations.
• Support customers with configuration changes, policy enablement, security baselines, and certification readiness activities.
• Coordinate remediation activities with internal Support and Engineering teams where specialist expertise is required.
• Prepare and maintain evidence packs, technical documentation, screenshots, and supporting materials for IASME submissions.
• Provide clear, practical guidance to technical and non-technical stakeholders.
• Support Cyber Essentials Plus audits and coordinate the resolution of any findings.
• Stay up to date with changes to Cyber Essentials requirements, security best practices, and the evolving threat landscape.
• Identify opportunities for customers to further strengthen their security posture.
• Contribute to process improvements, templates, documentation, and service delivery methodologies.
• Support the development of automated compliance and reporting capabilities.
• Work with internal teams to identify opportunities for customers to benefit from additional security services.

Skills, Knowledge & Expertise

Essential Skills & Experience

• Experience working in IT Infrastructure, Systems Administration, Cyber Security, Managed Services, or a similar technical environment.
• Strong knowledge of Microsoft 365 and Azure administration, including tenant security and conditional access.
• Experience working with endpoint management and patching solutions such as Microsoft Intune, Datto RMM, or similar platforms.
• Good understanding of network architecture, firewall technologies, and security controls.
• Experience with endpoint protection technologies such as Microsoft Defender, Bitdefender, or equivalent solutions.
• Understanding of vulnerability management and security remediation processes.
• Knowledge of security hardening standards and security best practices.
• Excellent written and verbal communication skills.
• Ability to explain technical security concepts in a clear and accessible way.
• Strong organisational skills with excellent attention to detail and documentation standards.
• Ability to manage multiple customer engagements and competing priorities.
• Self-motivated with the ability to work independently and collaboratively.
• Willingness to undertake occasional customer site visits.

Desirable Skills

• Previous experience supporting or delivering Cyber Essentials and Cyber Essentials Plus assessments.
• Knowledge of security frameworks such as ISO 27001, SOC 2, or the NCSC Cyber Assessment Framework (CAF).
• Relevant certifications such as:
  • CompTIA Security+
  • Microsoft SC-900
  • IASME Cyber Essentials Practitioner
• Experience using ITSM platforms such as ServiceNow or similar ticketing systems.
• Familiarity with documentation and configuration management platforms such as IT Glue or Hudu.
• Understanding of cyber risk assessment and risk management methodologies.
• Exposure to Security Operations Centres (SOC), SIEM platforms, MDR, EDR, or XDR services.
• Knowledge of security automation and compliance monitoring tools.

Job Benefits

• Holiday Allowance - 24 days + bank holidays + birthday leave.
• Hybrid working options - performance depending.
• Enhanced maternity, paternity and adoption leave.
• Paid volunteering day * regular charity events.
• Wider company benefits across health, financial wellbeing, Pension etc.

Internal job reference: Senior Associate