Cyber Security Analyst

Taylor Hall Recruitment; Watford; On-site; GBP 26,000 - 36,000; Full time

Job summary

Taylor Hall Recruitment is seeking a Junior Security Analyst to own how we manage security across our suppliers. You’ll map suppliers, their access, and renewal dates, ensuring each one meets our security standards.

You’ll work between technical and commercial teams, communicating with internal colleagues, suppliers and senior leaders, documenting findings and building a career in cyber security through real risk management exposure.

Qualifications

• Organised and self-motivated
• Excellent communication across internal teams and suppliers
• Keen eye for risk and detail

Responsibilities

• Build the supplier register and document data access, contracts and ownership
• Track contract renewals and security review dates
• Assess supplier security using questionnaires and evidence (ISO 27001, SOC 2, Cyber Essentials)
• Determine necessary assurances per supplier (tests, evidence, contract changes)
• Communicate requirements to non-technical colleagues and chase information from suppliers
• Maintain records and reports, presenting risks to senior stakeholders
• Support the security team with policies and risk assessments

Tools

Excel

Job description

We're looking for a Junior Security Analyst to take ownership of how we manage security across our suppliers. You'll build a clear picture of who our suppliers are, what they have access to and when their contracts renew, then make sure each one meets the security standards we need.

It's a varied role that sits between the technical and the commercial side of the business. You'll spend as much time talking to people, internal teams, suppliers and senior leaders, as you will documenting and analysing. It suits someone organised and self-motivated who wants to build a career in cyber security and get real exposure to how a business manages risk.

What you'll be doing

• Building the supplier register: identifying every supplier the business uses and documenting what they provide, what data and systems they can access, and who owns the relationship internally.
• Tracking renewals: keeping a clear view of contract and renewal dates so security reviews happen before a contract is renewed, not after.
• Assessing supplier security: reviewing each supplier's security position through questionnaires, certifications (e.g. ISO 27001, SOC 2, Cyber Essentials) and evidence, and flagging gaps or risks.
• Deciding what's needed: working out the right level of assurance for each supplier, for example whether a penetration test, further evidence or contract changes are required, and following it through.
• Talking to the business and suppliers: acting as the point of contact for supplier security, explaining requirements clearly to non-technical colleagues and chasing suppliers for information.
• Documenting and reporting: keeping records, trackers and reports up to date (largely in Excel), and presenting findings and risks to senior stakeholders.
• Supporting the wider security team with policies, risk assessments and other projects as the role grows.