Cyber Security Analyst

Revoco; Greater London; Hybrid; GBP 72,000 - 88,000; Full time

Benefits offered by this job

Hybrid work (2 days in central London)

Job summary

Revoco in London is seeking a Senior Analyst or hands-on security leader to shape and deliver the organisation's security strategy from the ground up.

You'll work on ISO 27001/ISMS, risk and compliance, incident response, vulnerability management and cloud security (Azure preferred, AWS/GCP valuable). Hybrid role with two days in Fleet Street, London.

Qualifications

• Experience implementing ISO 27001/ISMS.
• Proven ability to develop security roadmaps.
• Experience in risk & compliance management.
• Hands-on incident response experience.
• Experience with vulnerability management.
• Strong cloud security experience (Azure preferred).
• Knowledge of AWS/GCP is a plus.

Responsibilities

• Shape and deliver the organisation's security strategy.
• Embed security across the business with IT/infrastructure.
• Influence stakeholders and work with third-party vendors.
• Build and lead a security team as the function grows.

Skills

ISO 27001

ISMS

Security roadmaps

Risk & compliance

Incident response

Vulnerability mgmt

Cloud security

Azure

AWS/GCP

SIEM

Firewalls

EDR/IDS/IPS

IAM

Stakeholder influence

Tools

SIEM

Firewalls

EDR

IDS/IPS

IAM

Job description

Working with a quite a unique, successful company in the comparison space, leaders in their industry. This is a role for a Senior Analyst or a hands-on leader to be involved with, as is quite broad but with lots of scope to put your stamp on things and good career progression.

The basics:

Circa 80K with 5% bonus

Hybrid - 2 days a week central London (Fleet street)

There is no VISA sponsorship, now or in future for this role

It's a hands-on position where you'll have the opportunity to shape and deliver the organisation's security strategy from the ground up, while remaining involved in the technical side of things.

They're looking for someone with experience around ISO 27001/ISMS, security roadmaps, risk and compliance, incident response, vulnerability management and cloud security (particularly Azure, although AWS/GCP experience is also valuable). It will be quite broad, especially at the beginning.

You will also be working with technologies like SIEM, firewalls, EDR, IDS/IPS and identity & access management, partnering closely with infrastructure and IT teams to embed security across the business.

Beyond the technical side, they're keen to find someone who enjoys influencing stakeholders, working with third-party vendors, driving continuous improvement and, as the function grows, building and leading a security team.