Information Security Analyst

JR United Kingdom; Glasgow; Hybrid; GBP 45,000 - 55,000; Full time

Job summary

A global Digital & Data Services company is seeking an Information Security Analyst to monitor and protect its IT infrastructure across sectors like retail and healthcare. This hybrid role includes incident response, security policy enforcement, and vulnerability assessments, aimed at ensuring the organization’s compliance with industry standards. Candidates should have relevant experience, a degree in the field, and possess the necessary security certifications.

Benefits

Hybrid working – 3 days in London office

Opportunities for professional growth

Certification support

Collaborative team environment

Qualifications

• 2+ years of experience in an information security role.
• Strong understanding of security principles and frameworks.
• Security certifications like CompTIA Security+, SSCP, or CISSP preferred.

Responsibilities

• Monitor networks for security breaches and respond to incidents.
• Conduct vulnerability assessments and manage SIEM tools.
• Support compliance initiatives and conduct security training.

Skills

Analytical skills

Problem-solving

Communication skills

Education

Bachelor’s degree in Information Security

Equivalent experience

Tools

SIEM tools

Intrusion detection/prevention systems

Firewalls

Endpoint protection

Vulnerability scanning tools

AWS

Azure

GCP

Scripting (Python, PowerShell)

Job description

Social network you want to login/join with:

Information Security Analyst – Digital Services – Up to £55k – Hybrid - London

Overview:

An exciting opportunity has arisen for an Information Security Analyst to join a global Digital & Data Services company operating on a global scale across retail, healthcare and other sectors. In this role, you will be responsible for monitoring, assessing, and responding to security incidents and threats, ensuring compliance with security policies, and implementing measures to protect the organisation's data and IT infrastructure.

Role & Responsibilities:

• Monitor networks and systems for security breaches, intrusions, and abnormal system behavior
• Investigate security incidents, perform root cause analysis, and provide incident response support
• Conduct regular vulnerability assessments and penetration testing; assist in remediation efforts
• Maintain and manage SIEM (Security Information and Event Management) tools and log analysis
• Develop and enforce security policies, standards, and procedures
• Work with IT and development teams to implement secure system designs and configurations
• Support compliance initiatives (e.g., ISO 27001, NIST, GDPR, PCI-DSS) by assisting with audits and documentation
• Conduct security awareness training and phishing simulations for employees
• Keep up-to-date with the latest security trends, threats, and technology solutions
• Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent experience)
• 2+ years of experience in an information security or cybersecurity role
• Strong understanding of security principles, frameworks, and practices (e.g., CIA triad, defense in depth)
• Experience with SIEM tools, intrusion detection/prevention systems (IDS/IPS), firewalls, and endpoint protection
• Familiarity with vulnerability scanning tools (e.g., Nessus, Qualys) and remediation processes
• Knowledge of networking protocols, operating systems (Windows, Linux), and cloud platforms
• Excellent analytical, problem-solving, and communication skills
• Security certifications such as CompTIA Security+, SSCP, CEH, GSEC, or CISSP (or actively working toward one)
• Experience with cloud security in AWS, Azure, or GCP environments
• Knowledge of scripting or automation (e.g., Python, PowerShell) for security tasks
• Understanding of DevSecOps practices and secure SDLC

Package:

• Hybrid working – 3 days in London office
• Opportunities for professional growth and certification support
• Collaborative and inclusive team environment