Cyber Security Analyst

BlackCode; Reading; Hybrid; GBP 55,000 - 65,000; Full time

Job summary

BlackCode in Reading is seeking a Cyber Security Analyst to join our growing SaaS business in a hybrid, permanent role. You’ll help ensure cyber resilience across systems and services against evolving threats while contributing to security strategy at pace.

The role emphasizes hands-on work, ISO 27001 ISMS involvement, risk and incident response, and collaboration with engineers and customers to secure the product and processes.

Qualifications

• Experience with ISO 27001 ISMS audits.
• Hands-on involvement in risk assessment and incident response.
• Familiarity with vulnerability management in SaaS environments.
• Awareness of AI security considerations in product and governance.
• Understanding of security controls and regulatory expectations.

Responsibilities

• Work on: ISO 27001, CE+, risk, vulnerability management, incident response
• AI security both securing our product and governing how we use AI internally
• Answer the tough questions in RFPs, customer audits, and qualification reviews
• Register, the reviews, the evidence, the unglamorous work that makes audits painless

Skills

ISO 27001

Vulnerability management

Incident response

AI security

Risk assessment

CE+

Education

IT or STEM degree

Security qualification

Job description

Cyber Security Analyst - SaaS, Reading, Hybrid, Permanent £55-65K base.

Why this role, specifically: This isn't a seat in a large security team where you own a slice of a process. You'll be in a business that's growing fast enough to need you and small enough to let you make the Security function your passion.

We are seeking an experienced Cyber Security Analyst that can ensure that all systems and services have the level of cyber resilience and security that demanding customers rightly expect. A newly created position.

You will ensure that cyber security keeps up with the rapid growth as a business and the unrelenting pace of developments in the cyber security world including threats, defences, technologies, and good practices.

What you'll actually do:

• Work on: ISO 27001, CE+, risk, vulnerability management, incident response
• AI security both securing our product and governing how we use AI internally
• Answer the tough questions in RFPs, customer audits, and qualification reviews
• Register, the reviews, the evidence, the unglamorous work that makes audits painless

You'll thrive here if you:

• Worked on ISO 27001 ISMS through audits
• Hold an IT or STEM centric degree and ideally a security qualification
• Know your way around a SaaS business or in a regulated sector
• Want to own a function, not sit three layers down in one
• Can talk security fluently with both engineers and worried customers