Information Technology Security Analyst

Sanderson; United Kingdom; Remote; GBP 41,000 - 50,000; Full time

Job summary

Sanderson is seeking a Senior IT Security Analyst to join its Security Operations function. The role focuses on information security assurance, audits and continuous improvement, supporting ISO 27001 compliance and acting as a contact for assurance activities.

You will work with the Security Operations Manager to strengthen security posture, manage audits, evidence gathering and ISMS improvements, with remote work and occasional travel within the UK.

Qualifications

• Background in Information Security, Governance, Risk or Compliance.
• Experience supporting security audits and assurance activities.
• Strong communication skills with technical and non-technical stakeholders.

Responsibilities

• Support and coordinate internal/external security audits (ISO 27001 and frameworks).
• Own day-to-day information security assurance activities (evidence gathering, control reviews, audit prep).
• Maintain and improve the ISMS; manage customer assurance requests and due diligence questionnaires.
• Oversee security assurance tooling, workflows, task allocation and remediation tracking.
• Act as escalation point for information security queries and guidance to stakeholders.
• Collaborate with Security Operations Manager to identify risks and strengthen controls.
• Support wider security operations, vulnerability management and improvement initiatives.

Skills

ISO 27001

Security governance

Audit & assurance

Stakeholder communication

Job description

IT Security Analyst – Information Security & Assurance

Salary: Up to £45,000

Location: Remote / Home-Based (UK) with occasional office travel

Contract: Permanent, Full-Time

An exciting opportunity to develop your career in Information Security!

I'm currently working with an established and growing technology organisation looking to appoint a Senior IT Security Analyst to join its wider Security Operations function.

This is a fantastic opportunity for someone with a background in Information Security, Governance, Risk or Compliance who is looking to take greater ownership of security assurance, audits and continuous improvement.

Working closely with the Security Operations Manager, you'll play an important role in strengthening the organisation's security posture, supporting ISO 27001 compliance and acting as a key point of contact for security assurance activities.

What you'll be doing

• Supporting and coordinating internal and external security audits, particularly around ISO 27001 and other recognised security frameworks.


• Taking ownership of day-to-day information security assurance activities, including evidence gathering, control reviews and audit preparation.


• Supporting the ongoing maintenance and improvement of the organisation's Information Security Management System (ISMS).


• Managing customer security assurance requests, due diligence questionnaires and compliance-related queries.


• Overseeing security assurance tooling, automated workflows, task allocation and remediation tracking.


• Acting as an escalation point for information security queries, providing advice and guidance to internal stakeholders.


• Working closely with the Security Operations Manager to identify risks, improve processes and strengthen security controls.


• Supporting wider security operations, vulnerability management and continuous improvement initiatives.

What we're looking for

• Approximately 2-5 years' experience within Information Security, Cyber Security, IT Security or GRC.


• Good working knowledge of ISO 27001, security frameworks, audit processes and security controls.


• Experience supporting security audits, compliance activities or information security assurance.


• Understanding of security tooling, risk management and governance processes.


• Strong communication skills, with the confidence to engage with technical and non-technical stakeholders.


• A proactive, organised approach, with the ability to take ownership of tasks and manage competing priorities.


• Ideally, experience within a technology, software, SaaS or similar business environment.

Experience with Cyber Essentials Plus, customer assurance questionnaires, security automation platforms or vulnerability management tools would be advantageous.

Why consider this opportunity?

• Up to £45,000 salary


• Predominantly remote working with occasional office travel


• Opportunity to take real ownership of security assurance and governance activities


• Work closely with experienced security leadership


• Exposure to a broad range of security frameworks, tools and business functions


• Excellent opportunity to develop your career within a growing technology organisation

If you're currently working in Information Security, Security Assurance or GRC and are looking for an opportunity to develop your experience and take on greater responsibility, I'd love to hear from you!