ICT Security Analyst

Opus People Solutions Ltd; Milton Keynes; On-site; GBP 31,606 - 42,749; Full time

Job summary

Opus People Solutions is recruiting an ICT Security Analyst for Milton Keynes City Council. The role focuses on protecting council ICT services, monitoring threats and maintaining security standards.

You will lead incident response, assess risks, and work with stakeholders to implement mitigations while ensuring compliance with security frameworks and best practices. Office-based role in Milton Keynes.

Qualifications

• Related professional qualifications and experience, including degree level qualification.
• Demonstrable experience of Microsoft Security Stack: Defender, Sentinel, Entra ID, Copilot for Security, with alert monitoring and response.
• Experience with automation playbooks and familiarity with security tooling such as PowerShell or KQL.

Responsibilities

• Proactively monitor and protect ICT services against cyber threats and vulnerabilities, maintaining awareness of threats and standards.
• Triage and investigate security alerts/reports to identify incidents and support remediation.
• Identify and document vulnerabilities, assess risks, and develop mitigation plans with stakeholders.
• Lead incident response activities ensuring containment, eradication and recovery per plans.
• Deliver security-focused projects with risk assessments and security impact analysis.
• Collaborate with colleagues, suppliers and partners to strengthen security controls across MKCC.
• Develop and deliver cyber security awareness and guidance to colleagues.
• Cover for Identity and Access administrator and provide reporting on incidents and trends.

Skills

Microsoft Defender

Sentinel

Entra ID

Copilot for Security

PowerShell

KQL

Python

Communication skills

Education

Degree level qualification

Cyber Security certifications (e.g., CCSP, CySA+, GCIA, CSA, SC-200)

Tools

Copilot for Security

Microsoft Defender

Sentinel

Entra ID

Job description

ICT Security Analyst
Daily rate: £19.32 per hour (PAYE inside IR35)
Location: Milton Keynes Civic Offices
Contract: 3 months
Working hours: 37 per week, office based

Purpose of the Role

Opus People Solutions is recruiting on behalf of Milton Keynes Council for an ICT Security Analyst to join our ICT service at Milton Keynes City Council. The ICT Security team protects the council's systems, data and digital services so the council can continue to operate securely and reliably for the people of Milton Keynes. The team sets and maintains security policies, standards and guidance, manages cyber risk, and works across council services to make sure security is built into day‑to‑day operations, projects and technology change.

The team monitors for threats and weaknesses, investigates incidents, leads response and recovery when issues arise, and helps strengthen resilience through planning, training, awareness and continual improvement. It also supports compliance with recognised frameworks, works with partners and suppliers to improve secure delivery, and helps the council adopt modern technologies in a safe, controlled and responsible way.

By protecting information and reducing disruption, the Security team helps Milton Keynes City Council remain resilient, trusted and able to deliver essential services across more than 200 council services. You’ll help us protect vital systems, reduce cyber risk, respond to incidents and give practical advice that supports colleagues right across the organisation.

Key Deliverables

• Proactively monitor and protect ICT services against cyber threats and vulnerabilities ensuring adherence to appropriate Cyber Security frameworks. Maintain awareness of emerging threats, threat intelligence, standards and frameworks to inform defence actions and improvements.
• Monitor, triage and investigate security alerts/reports. Analyse security event data, including end-user reports, to identify incidents and support effective response and remediation.
• Identify, assess and prioritise security risks (current and emerging), evaluating impact and likelihood. Investigate, monitor, and audit system practices to ensure services and configuration items meet cyber security policies and baseline standards. Identify and document vulnerabilities, analyse trends, and present findings with recommendations. Develop, implement and track mitigation plans in collaboration with stakeholders.
• Lead the response to ICT security incidents, ensuring containment, eradication and recovery activities are carried out in accordance with established incident response plans.
• To deliver and assist in the delivery of projects in accordance with user specifications and timetables. Work closely with council services on project work, providing expertise on security impact, including risk, cost and deterrent. Understand security features of bespoke systems within MKCC.
• Collaborate effectively with colleagues, suppliers, and partners to strengthen security controls, enhance security posture, and support organisational objectives. Acting as a subject matter expert for ICT security across the council, including the installation, maintenance, upgrading and optimisation of MKCC systems.
• Develop and deliver cyber security awareness and guidance to colleagues, promoting secure behaviours and reducing organisational risk.
• Collaborate with and act as cover for the Identity and Access administrator.
• Produce regular reporting on security incidents, risks, and trends, providing insights and recommendations to strengthen organisational security posture.
• Stay informed on Microsoft security product updates, emerging threats, and best practices. Drive initiatives to enhance security posture and ensure adherence to regulatory and organisational compliance standards.

Essential Skills

• Related professional qualifications and experience, including degree level qualification.
• Demonstrable experience of Microsoft Security Stack: Experience with Microsoft Defender suite, Sentinel, Entra ID, and Copilot for Security. Ability to monitor, analyse, and respond to alerts in Sentinel and Defender; familiarity with automation playbooks.
• Demonstrable excellent written and verbal communication skills, with the ability to translate security risks, technical findings and recommended actions for technical and non-technical audiences.
• Experience using PowerShell or Kusto Query Language (KQL) to support analysis, monitoring, and automation. Exposure to coding (e.g., Python) combined with a demonstrable ability to work with accuracy and attention to detail.
• Cyber Security certifications, such as CCSP, CySA+, GCIA, CSA, SC-200, or similar.
• Demonstrable experience of working in an Enterprise information security function within a large organisation.
• Ability to work closely with ICT Security Lead, Identity & Access Administrator, and other stakeholders including colleagues across MKCC.
• Practical experience with asset management systems and experience securing Microsoft 365 services (e.g., SharePoint, Teams, Copilot).
• Evidenced knowledge and understanding of security frameworks, standards and best practices (CAF, Cyber Essentials, NIST, ISO27001).
• Proven familiarity with modern network, cloud and identity security concepts such as authentication, firewalls, endpoint protection, email security, vulnerability management, logging, monitoring and security controls.
• Continuous Learning and Adaptability: Commitment to staying updated on Microsoft security technologies, threat trends, and best practices.