Cyber Essentials Analyst

Focus Group; Shoreham-by-Sea; Hybrid; GBP 35.000 - 40.000; Vollzeit

Benefits dieser Stelle

Holiday Allowance 24 days + bank

Hybrid working options

Enhanced leave

Volunteer day

Company benefits

Zusammenfassung

Focus Group is seeking a Cyber Essentials Analyst to join our Managed Security Services team. You will guide organisations through Cyber Essentials certifications, assess environments, and help implement controls to meet UK standards.

You’ll collaborate with customers, auditors and internal teams to deliver practical security improvements while building strong customer relationships. Hybrid work in multiple locations supports travel to client sites as needed.

Qualifikationen

• Experience in IT Infrastructure, Security Operations and Managed Services.
• Strong Microsoft 365 and Azure administration with security focus.
• Experience with endpoint management and patching tools like Intune or Datto RMM.
• Solid understanding of firewalls and network security controls.
• Experience with endpoint protection such as Defender or Bitdefender.
• Knowledge of vulnerability management and remediation processes.
• Familiarity with security hardening standards and best practices.
• Excellent written and verbal communication skills.
• Ability to explain technical security concepts to non-technical stakeholders.
• Strong organizational skills and attention to detail.
• Ability to manage multiple customer engagements and priorities.
• Self-motivated and able to work independently; willing to travel to client sites.

Aufgaben

• Lead customers through CE and CE+ certification lifecycle.
• Conduct readiness assessments across CE controls.
• Identify compliance gaps and provide remediation recommendations.
• Support configuration changes, security baselines and certification readiness.
• Coordinate remediation with internal Support and Engineering teams.
• Prepare evidence packs and documentation for IASME submissions.
• Provide clear guidance to technical and non-technical stakeholders.
• Support CE Plus audits and resolve findings.
• Stay updated on changes to CE requirements and security practices.
• Identify opportunities for additional security services and improvements.

Kenntnisse

IT Infrastructure

Cyber Security

MS 365 & Azure

Intune / RMM

Network Security

Endpoint Protection

Vulnerability Management

Security Best Practices

Communication Skills

Documentation

Customer Engagement

Independent Working

Site Visits

Tools

Microsoft Intune

Datto RMM

Firewall Technologies

Microsoft Defender

Bitdefender

IASME Cyber Essentials

Jobbeschreibung

Cyber Essentials Analyst

Department: Technical Operations

Employment Type: Permanent

Location: Multiple Locations

Compensation: £35,000 - £40,000 / year

Description

Location: Hybrid / Manchester
Salary: Competitive
Contract: Permanent

Focus Group is looking for a customer-focused Cyber Essentials Analyst to join our growing Managed Security Services team. This is an excellent opportunity for a security professional with a strong technical background and a passion for helping customers improve their cyber security posture.

As a Cyber Essentials Analyst, you'll work directly with organisations across a variety of sectors, guiding them through the complete Cyber Essentials (CE) and Cyber Essentials Plus (CE+) certification journey. You'll assess environments, identify compliance gaps, recommend practical improvements, and support customers in achieving and maintaining certification against UK Government-backed security standards.

This role offers the perfect blend of technical security expertise, consultancy, and customer engagement, making it ideal for someone who enjoys solving problems and building trusted relationships.

Key Responsibilities

Working closely with customers, internal engineering teams, service delivery teams, and external auditors, you'll provide expert guidance throughout the Cyber Essentials certification process. You'll help organisations understand security requirements, implement necessary controls, and improve their overall security posture beyond basic compliance.

You'll play a key role in expanding Focus Group's cyber assurance services while helping customers reduce risk and strengthen their security foundations.

• Lead customers through the full Cyber Essentials and Cyber Essentials Plus certification lifecycle.
• Conduct readiness assessments across the five Cyber Essentials control areas:
  • Firewalls
  • Secure Configuration
  • User Access Control
  • Malware Protection
  • Patch Management
• Identify compliance gaps and provide clear, risk-based remediation recommendations.
• Support customers with configuration changes, policy enablement, security baselines, and certification readiness activities.
• Coordinate remediation activities with internal Support and Engineering teams where specialist expertise is required.
• Prepare and maintain evidence packs, technical documentation, screenshots, and supporting materials for IASME submissions.
• Provide clear, practical guidance to technical and non-technical stakeholders.
• Support Cyber Essentials Plus audits and coordinate the resolution of any findings.
• Stay up to date with changes to Cyber Essentials requirements, security best practices, and the evolving threat landscape.
• Identify opportunities for customers to further strengthen their security posture.
• Contribute to process improvements, templates, documentation, and service delivery methodologies.
• Support the development of automated compliance and reporting capabilities.
• Work with internal teams to identify opportunities for customers to benefit from additional security services.

Skills, Knowledge & Expertise

Essential Skills & Experience

• Experience working in IT Infrastructure, Systems Administration, Cyber Security, Managed Services, or a similar technical environment.
• Strong knowledge of Microsoft 365 and Azure administration, including tenant security and conditional access.
• Experience working with endpoint management and patching solutions such as Microsoft Intune, Datto RMM, or similar platforms.
• Good understanding of network architecture, firewall technologies, and security controls.
• Experience with endpoint protection technologies such as Microsoft Defender, Bitdefender, or equivalent solutions.
• Understanding of vulnerability management and security remediation processes.
• Knowledge of security hardening standards and security best practices.
• Excellent written and verbal communication skills.
• Ability to explain technical security concepts in a clear and accessible way.
• Strong organisational skills with excellent attention to detail and documentation standards.
• Ability to manage multiple customer engagements and competing priorities.
• Self-motivated with the ability to work independently and collaboratively.
• Willingness to undertake occasional customer site visits.

Desirable Skills

• Previous experience supporting or delivering Cyber Essentials and Cyber Essentials Plus assessments.
• Knowledge of security frameworks such as ISO 27001, SOC 2, or the NCSC Cyber Assessment Framework (CAF).
• Relevant certifications such as:
  • CompTIA Security+
  • Microsoft SC-900
  • IASME Cyber Essentials Practitioner
• Experience using ITSM platforms such as ServiceNow or similar ticketing systems.
• Familiarity with documentation and configuration management platforms such as IT Glue or Hudu.
• Understanding of cyber risk assessment and risk management methodologies.
• Exposure to Security Operations Centres (SOC), SIEM platforms, MDR, EDR, or XDR services.
• Knowledge of security automation and compliance monitoring tools.

Job Benefits

• Holiday Allowance - 24 days + bank holidays + birthday leave.
• Hybrid working options - performance depending.
• Enhanced maternity, paternity and adoption leave.
• Paid volunteering day * regular charity events.
• Wider company benefits across health, financial wellbeing, Pension etc.

Internal job reference: Senior Associate