Cyber Security Analyst

DTG Global; Cheshunt; On-site; GBP 45,000 - 60,000; Full time

Job summary

DTG Global in the United Kingdom is seeking a hands-on Cyber Security Analyst to take day-to-day ownership of cyber and information security across the organisation. You will manage risk, respond to incidents and work with IT colleagues, service owners and third-party suppliers.

You will develop security policies, coordinate vulnerability management, deliver security awareness training and drive secure-by-design practices across projects and cloud services in a not-for-profit setting.

Qualifications

• Hands-on cyber/information security experience including incident response.
• Strong knowledge of Microsoft 365, Azure AD/Entra ID, endpoint and email security.
• Understanding UK data protection principles and compliance requirements.
• Ability to translate risk into plain language for non-technical audiences.
• Strong stakeholder management and influencing skills.
• Relevant qualification (Security+, ISO 27001 Foundation) or equivalent experience.

Responsibilities

• Develop and maintain security policies, standards and procedures.
• Lead cyber risk assessments, treatment plans and reporting.
• Coordinate incident response and drive lessons learned.
• Oversee vulnerability management and remediation with internal teams and suppliers.
• Deliver security awareness training and promote secure behaviours.
• Advise on secure-by-design across projects and cloud services.
• Support compliance, audits and data protection obligations.
• Contribute to business continuity and resilience planning.

Skills

Cyber security

Incident response

Vulnerability management

Risk management

Security awareness

Stakeholder communication

Security certifications

Education

Security+ or ISO 27001 Foundation

Tools

Microsoft 365

Azure AD/Entra ID

Endpoint security

Email security

Job description

Cyber Security Analyst needed to take day-to-day ownership of cyber and information security across the organisation for this well established not for profit.

This is a hands-on, operational role covering risk management, incident response, vulnerability management, compliance and security awareness. You'll work closely with IT colleagues, service owners and third-party suppliers.

What you'll be doing

• Developing and maintaining security policies, standards and procedures aligned to recognised frameworks
• Leading on cyber risk management - assessments, treatment plans and reporting
• Coordinating incident response, minimising impact and driving lessons learned
• Overseeing vulnerability management and remediation with internal teams and suppliers
• Delivering security awareness training and embedding good behaviours across the business
• Advising on secure-by-design principles across projects, systems and cloud services
• Supporting compliance, audit activities and data protection obligations
• Contributing to business continuity and resilience planning

What we're looking for

• Solid hands-on experience in cyber or information security, including incident response and vulnerability management
• Good working knowledge of Microsoft 365, Azure AD/Entra ID, endpoint and email security
• Understanding of UK data protection principles and compliance requirements
• Ability to communicate clearly with non-technical audiences - translating risk into plain language
• Strong stakeholder management and influencing skills
• A relevant qualification (Security+, ISO 27001 Foundation or equivalent) or solid equivalent experience