Information Security Analyst

Zuto Limited

Manchester

On-site

GBP 80,000 - 110,000

Full time

5 days ago

Be an early applicant

Application generator

Get a reply from this employer — a resume and cover letter tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Pension scheme

Life assurance

Health cash back plan

Cycle to work

Bring your dog to work

Job summary

Zuto Limited is seeking a Senior Information Security Analyst to protect our technology, data and customers while maturing our security posture. The role blends technical security with governance, ranging from SIEM investigations to supplier assessments and audits.

You will be a senior reference for colleagues, balancing risk with practical decision making. As part of the security team, you will own end-to-end vulnerability management, manage incident investigations, and contribute to cloud

Qualifications

Substantial experience in Information or Cyber Security.
Hands-on capability across SIEM, EDR, vulnerability management, and cloud security.
Experience with incident investigation and response in senior capacity.
Experience overseeing cloud vulnerability management programmes and audits.
Familiarity with ISO 27001 and control effectiveness.

Responsibilities

Manage day-to-day security alerts, tickets and SLAs.
Serve as senior responder for security incidents and investigations.
Own vulnerability management lifecycle from scanning to remediation and reporting.
Provide IAM controls and support access reviews and recertification.
Contribute security input to cloud architecture, logging and encryption.

Skills

Information Security

SIEM

EDR

Vulnerability Management

AWS Cloud

Identity & Access Management

Incident Response

ISO 27001

Education

Degree in Computer Science or related field

Tools

PowerShell

Power Automate

JSON

Job description

As our Senior Information Security Analyst, you'll play a key role in protecting Zuto's technology, data and customers while helping us continue to mature our overall security posture. This is a blended technical security and governance role. One day you could be investigating an alert within our SIEM or responding to a security incident; the next, you could be assessing a supplier, supporting an ISO 27001 audit or discussing a control decision with senior stakeholders. You'll act as a senior point of reference for colleagues across the business, combining strong technical knowledge with a practical, risk-based approach to security. We're looking for someone who can distinguish genuine risk from noise, make sound decisions and help us continuously improve rather than simply identify problems.

What You'll be Doing Security Operations & Incident Response

Managing day-to-day security alerts, requests and tickets through to resolution, ensuring SLAs are achieved.
Acting as a senior responder for security incidents, supporting investigation, containment and resolution.

Vulnerability & Threat Management

Owning the end-to-end vulnerability management lifecycle, from scanning and validation through to prioritisation, remediation and reporting.
Managing internal and external penetration testing and working with Engineering teams to resolve findings.

Identity, Cloud & Technical Security

Assuring Identity and Access Management controls including MFA, privileged access, RBAC and joiner/mover/leaver processes.
Supporting periodic access reviews and recertification.
Providing security input into cloud architecture, network segmentation, logging and encryption.

AI & Emerging Talent

Assessing the security implications of new and emerging technologies, including AI and machine-learning tools.
Helping ensure appropriate data-handling safeguards and human oversight are built into AI adoption.

What you'll need

Substantial experience working within an Information or Cyber Security role
Strong hands-on technical capability across several areas such as: + SIEM & log analysis + Endpoint Detection & Response + Vulnerability management + AWS/cloud security + Identity & Access Management + Email & network security
Practical experience taking a senior role in security incident investigation and response.
Experience overseeing infrastructure and cloud vulnerability management programmes.
Working knowledge of ISO 27001 and experience demonstrating control effectiveness.
A degree in a computer-related subject or equivalent professional experience within cyber security would be beneficial.

Nice to Have

Experience within UK financial services, consumer credit, lending or another FCA-regulated environment.
Knowledge of security frameworks such as NIST CSF, CIS Controls or NCSC CAF.
Scripting or automation experience using tools such as PowerShell, Power Automate, JSON or query languages., A degree in a computer-related subject or equivalent professional experience within cyber security would be beneficial.

Join our team of passionate Zutonites and help transform the car finance experience with simplicity and integrity. Since our journey began in 2006, we've grown to a team of over 550 people - all driven by a shared purpose: to make buying a car transparent and hassle-free. We know how important cars are in people's everyday lives - for work, family and freedom - and that's why we're proud to help hundreds of thousands of customers every year. From day one, we've been redefining what success looks like, creating something special at Zuto: a business that leaves a lasting, positive legacy. If you're looking for an engineering environment where you genuinely own problems, challenge existing approaches and help shape how we build technology, you'll fit right in. We're transforming our architecture and embracing AI-assisted development, giving our engineers the freedom and tools to move quickly, experiment and build better solutions.

Financial Wellbeing