Information Security Analyst — ISO 27001 & EDR Lead

VCCP; Greater London; On-site; GBP 65,000 - 85,000; Full time

Job summary

VCCP seeks an experienced Information Security Analyst to maintain and enhance its security posture. You will protect data assets, drive incident response, and coordinate improvements across security domains in a fast-paced agency environment.

The role requires hands-on work with Varonis, CrowdStrike Falcon, and Google Workspace security tools, plus ongoing efforts for ISO27001 and Cyber Essentials compliance within the UK market.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 5+ years in IT with at least 3 years in IT security.
• Solid understanding of vulnerability management, penetration testing, security audits, and encryption.
• Proven experience with Varonis, CrowdStrike Falcon, and Google Workspace security tools.

Responsibilities

• Customise the Varonis platform to generate reports and dashboards for data access insights.
• Own and manage Falcon CrowdStrike EDR and SIEM solutions, monitor and investigate incidents.
• Analyse security events using Google Admin capabilities and reduce spam and phishing incidents.
• Plan and execute quarterly phishing campaigns to educate employees on security best practices.
• Conduct regular asset scanning and vulnerability assessments and remediate weaknesses.
• Lead ISO27001 and Cyber Essentials certifications and audits.

Skills

Security concepts

Analytical skills

Communication skills

Teamwork

Education

Bachelor's degree in Computer Science or related field

Tools

Varonis

CrowdStrike Falcon

Google Workspace security tools

Job description

VCCP seeks an experienced Information Security Analyst to maintain and enhance its security posture. You will protect data assets, drive incident response, and coordinate improvements across security domains in a fast-paced agency environment.

The role requires hands-on work with Varonis, CrowdStrike Falcon, and Google Workspace security tools, plus ongoing efforts for ISO27001 and Cyber Essentials compliance within the UK market.