Group Cyber Security Operations Analyst

Arrow Global Group; Manchester; On-site; GBP 45,000 - 65,000; Full time

Job summary

Arrow Global Group in Manchester, UK is seeking a Group Cyber Security Operations Analyst to join the IT & Change department. The role focuses on monitoring security tools, investigating incidents, and supporting vulnerability management to protect information assets.

You will work with SOC, MSSP, and IT teams to improve detection, response, and security controls across endpoints, identity, cloud, and data protection. A strong analytical mindset is essential.

Qualifications

• Experience in Cyber Security, Information Security, Infrastructure, or IT Operations.
• Experience with security monitoring platforms, security alerts, incidents and vulnerability management processes.
• Knowledge of MITRE ATT&CK and cyber threat intelligence concepts.
• Familiarity with Microsoft 365, Azure and AWS security risks.
• Strong analytical and communication skills.

Responsibilities

• Monitor security tool outputs and SOC activities.
• Review, investigate and coordinate remediation of alerts and incidents.
• Support incident detection and response processes.
• Manage end-to-end vulnerability management lifecycle.
• Coordinate penetration testing activities and track findings.
• Support security controls across endpoints, identity, cloud, and code repositories.
• Produce operational reports and dashboards on security risks and controls.
• Collaborate with IT teams and security partners to maintain security processes.

Skills

Cyber security principles

SOC monitoring

Vulnerability management

Incident response

Threat intelligence

Microsoft Entra ID

SIEM/EDR

Communication skills

Education

Bachelor's degree in a relevant field

Tools

SIEM tools

EDR solutions

CASB tools

SEG/SWG gateways

Vulnerability management tools

Entra ID security tooling

Job description

Group Cyber Security Operations Analyst

Department: IT & Change

Employment Type: Permanent - Full Time

Location: Manchester, UK

Description

The Group Information Security Team (GIST) is a central, highly visible, responsive, and effective team which enables Arrow Global Group to deliver against its strategic objectives by reducing risk associated with information security to an acceptable level. Following the continued evolution of the Group Information Security operating model and increasing requirements to maintain a secure business and IT environment, GIST is seeking a Group Cyber Security Operations Analyst to support and enhance its Cyber Security Operations capabilities. The primary purpose of the role is to support the Confidentiality, Integrity and Availability (CIA) of information processed by Arrow Global and its portfolio companies through the effective operation, monitoring, and continuous improvement of key cyber security controls and services.

Key Responsibilities

• Monitor outputs from security tools and services including the Security Operations Centre (SOC), email security gateways, web security gateways, vulnerability management platforms, cloud security solutions, and other security technologies.
• Review, investigate, and coordinate the remediation of security alerts, incidents, and threats in conjunction with local IT teams and third-party service providers.
• Support the Incident Detection and Response process, ensuring incidents are appropriately investigated, documented, escalated, and resolved.
• Manage and track the end-to-end vulnerability management lifecycle, including vulnerability identification, reporting, remediation tracking, and escalation of overdue findings.
• Coordinate internal and external penetration testing activities and ensure findings are appropriately tracked through to resolution.
• Support the management and continuous improvement of security controls including endpoint protection, email security, web security, identity and access management, cloud security, and code repository security controls.
• Work closely with local IT teams, Cyber Security partners, and third-party service providers to ensure security processes and standards are consistently implemented and maintained.
• Produce regular operational reports, dashboards, and management information relating to cyber security risks, incidents, vulnerabilities, and control effectiveness.
• Maintain awareness of emerging threats, vulnerabilities, attack techniques, Artificial Intelligence (AI) security risks, and industry best practices.
• Produce actionable threat intelligence summaries and recommendations for security and technology teams, drawing on emerging threats, vulnerabilities, and threat actor activity relevant to Arrow Global's operating environment.
• Support the development of new SOC use cases, detection logic, and response procedures to improve security operations maturity.
• Act as a cyber security subject matter expert on projects involving new technologies, security capabilities, mergers, acquisitions, and business integrations.

Skills, Knowledge & Expertise

• Proven experience within a Cyber Security, Information Security, Infrastructure, or IT Operations role.
• Strong understanding of cyber security principles, technologies, and operational processes.
• Experience working with security monitoring platforms, security alerts, incidents, and vulnerability management processes.
• Knowledge of common security technologies including endpoint protection, email security, web security, identity and access management, vulnerability management, cloud security, and security monitoring solutions.
• Hands-on experience administering and supporting security technologies including SIEM, EDR, Secure Email Gateway (SEG), Secure Web Gateway (SWG), CASB, and vulnerability management platforms.
• Experience supporting Microsoft Entra ID security controls, including Conditional Access Policies and identity protection capabilities.
• Experience working with Security Operations Centres (SOC), Managed Security Service Providers (MSSP), or equivalent security service providers.
• Ability to analyse technical information and communicate findings clearly to technical and non-technical stakeholders.
• Effective prioritisation and organisational skills with the ability to manage multiple competing priorities.
• Strong analytical and problem-solving skills.
• Knowledge of cyber threat intelligence concepts, threat actor behaviours, and attack frameworks such as MITRE ATT&CK.
• Understanding of Microsoft 365, Azure, AWS, cloud environments, and associated cyber security risks.