Cyber Security Analyst

Kier Group plc.; Warmonds Hill; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

Kier Group plc is seeking a Cyber Security Analyst to join the Security Governance, Risk & Compliance team. This hybrid role involves working across suppliers and projects, ensuring security requirements are met while supporting delivery with robust risk controls.

You will review security submissions, drive remediation with suppliers, perform audits, and produce governance dashboards. The role may require liaising with stakeholders at all levels and obtaining SC clearance when appropriate.

Qualifications

• Demonstrable experience in security governance, risk and compliance.
• Experience with supplier assurance or third‑party risk management.
• Knowledge of ISO 27001, Cyber Essentials Plus, Defence Cyber Certification, Secure by Design, and supply chain risk management.

Responsibilities

• Review supplier security submissions and evidence against contractual and regulatory requirements.
• Challenge inadequate responses and drive remediation and compliance with suppliers.
• Conduct security audits and verification activities to ensure controls operate effectively.
• Assess security risks and support risk management across supplier and project lifecycles.
• Produce assurance dashboards and reports for management and governance forums.

Skills

Supplier assurance

Third‑party risk management

ISO 27001 knowledge

Cyber Essentials Plus knowledge

Security clearance readiness

Job description

Location: Flexible on Location - Hybrid working available with travel to offices and sites as required Hours: 37.5 per week - some flexibility on hours available if desired, just let us know when you speak to us.

We are unable to offer certificates of sponsorship to any candidates in this role.

As a Cyber Security Analyst, you'll play a vital role in ensuring that our suppliers, subcontractors, and projects meet the highest security standards. You'll independently assess and validate compliance with contractual, regulatory, and organisational security requirements, providing assurance that controls are effectively implemented and protecting our information and systems. This is an excellent opportunity to work across diverse projects, collaborating with teams to maintain robust security throughout our supply chain and project lifecycle.

What will you be responsible for?

As a Cyber Security Analyst, you'll be working within the Security Governance, Risk & Compliance team, supporting them in ensuring supplier and project compliance with security requirements. Your day to day will include:

• Reviewing and assessing supplier security submissions and evidence against contractual and regulatory requirements
• Challenging inadequate responses and working with suppliers to achieve remediation and compliance
• Conducting security audits and verification activities to ensure controls are operating effectively
• Assessing security risks and supporting risk management processes throughout supplier and project lifecycles
• Producing assurance dashboards and reports for management and governance forums

You have demonstrable experience in security governance, risk and compliance

• You have proven experience in supplier assurance or third-party risk management
• You have working knowledge of ISO 27001, Cyber Essentials Plus, Defence Cyber Certification, Secure by Design, and supply chain risk management
• You possess strong communication and stakeholder management skills, with the ability to engage effectively at all levels
• You have the ability to obtain Security Check (SC) clearance