Data Analyst (CISO Tribe) - Frontier AI Programme - Inside IR35

Xpand Group; Greater London; Hybrid; GBP 101,000 - 129,000; Full time

Job summary

Xpand Group in London is seeking a Cyber Security Data Analyst to support the Frontier AI Programme. You will combine data analytics, cyber security, and risk management to create trusted data foundations, models and dashboards that quantify exposure and drive remediation.

You will integrate data from CMDB, vulnerability scanners, SIEM, cloud and ITSM, build KPIs and KRIs, and deliver actionable insights to senior stakeholders through Power BI dashboards.

Qualifications

• Minimum 5 years of experience in Data Analysis, Data Management, BI or Security Analytics.
• Strong SQL skills and practical Python experience.
• Strong Power BI experience including semantic modelling and dashboards.

Responsibilities

• Design and maintain enterprise data models for assets, applications, vulnerabilities and remediation.
• Integrate data from CMDB, vulnerability scanners, cloud, identity, SIEM, ITSM, GRC and other platforms.
• Establish data quality, lineage, reconciliation and governance controls.
• Develop KPIs and KRIs including vulnerability exposure and remediation performance.
• Build dashboards using Power BI for operational, management and executive use.
• Support vulnerability management analytics and CTEM.
• Develop data flows, transformation logic and automated reporting processes.
• Translate complex security data into clear insights for senior stakeholders.

Skills

SQL

Python

Power BI

Data analysis

Stakeholder management

Security analytics

Data modelling

Tools

CMDB

Vulnerability scanners

Job description

Cyber Security Data Analyst - Frontier AI Programme

Location: London (Hybrid - 8 days onsite per month)
Contract: Contract
IR35: Inside IR35 (UK-based candidates)

The Role

We are seeking an experienced Cyber Security Data Analyst to support a major Frontier AI Response Plan within a CISO Offensive Security Tribe.

This is a specialist Data Analyst position sitting at the intersection of Data Analytics, Cyber Security and Technology Risk.

The successful candidate will act as the reference data analyst across the programme, establishing trusted data foundations, models, reporting and analytical capabilities to help measure cyber exposure, prioritise remediation activity and evidence risk reduction.

You will work across vulnerability management, offensive security, system hardening, detection and response, recovery and governance, bringing together fragmented data from multiple security and technology platforms to produce reliable, actionable insight.

Key Responsibilities

• Design and maintain enterprise data models covering assets, applications, vulnerabilities, exposures, controls and remediation.
• Integrate and analyse data from CMDB, vulnerability scanners, cloud, identity, SIEM, ITSM, GRC and security platforms.
• Establish data quality, lineage, reconciliation and governance controls.
• Develop and maintain programme KPIs and KRIs, including vulnerability exposure, remediation performance and risk reduction.
• Build operational, management and executive dashboards using Power BI.
• Support vulnerability management and Continuous Threat Exposure Management (CTEM) analytics.
• Develop data flows, transformation logic and automated reporting processes.
• Translate complex security data into clear insights and recommendations for senior stakeholders.

Essential Skills & Experience

• Minimum 5 years' experience in Data Analysis, Data Management, Business Intelligence or Security Analytics.
• Strong SQL skills and practical experience using Python or equivalent analytical tools.
• Strong Power BI experience, including semantic modelling and dashboard development.
• Experience with enterprise data modelling, data integration and data transformation.
• Understanding of data governance, data quality, lineage and reconciliation.
• Experience developing KPIs, KRIs, management reporting and analytical frameworks.
• Experience working with multiple enterprise systems, APIs, databases and structured/semi-structured data.
• Excellent stakeholder management and communication skills.

Desirable Experience

• Cyber Security, Technology Risk or Vulnerability Management environments.
• Unified Vulnerability Management (UVM).
• Continuous Threat Exposure Management (CTEM).
• Security tools and platforms including SIEM, CMDB, SAST, DAST, SCA and threat intelligence.
• Experience with cloud security, asset management and remediation workflows.
• Knowledge of cyber risk, attack paths and regulatory evidence.

Location & Contract Details

• London-based role.
• Hybrid working, with 8 days onsite per month in London.
• UK-based candidates will be engaged Inside IR35.
• Professional English required.