IT Security Analyst

83zero Ltd; Gerrards Cross; Hybrid; GBP 50,000 - 55,000; Full time

Job summary

A market-leading software company is seeking an IT Security Analyst to join their growing security function. The ideal candidate will have over three years of experience in Information Security and be adept at managing customer security questionnaires. This hybrid role offers a competitive salary between £50,000 - £55,000, along with benefits such as annual leave, private medical insurance, and flexible working arrangements.

Benefits

25 days annual leave + public holidays

Matched pension scheme

Private medical insurance & life assurance

Fitness allowance

Paid study leave & volunteering days

Excellent career development and training opportunities

Qualifications

• 3+ years' experience in Information Security, GRC, or Vendor Risk Management.
• Strong experience issuing or responding to security questionnaires.
• Knowledge of ISO 27001 Annex A, SOC 2, and GDPR/CCPA.
• Excellent communication skills, able to translate technical risk to non-technical stakeholders.
• Eligible to work in the UK and able to pass background checks.

Responsibilities

• Own and manage responses to customer security questionnaires.
• Work cross-functionally with Legal, Compliance, and Security teams.
• Conduct vendor risk assessments against ISO 27001, NIST, and CIS Controls.
• Manage the third-party due diligence programme.
• Track and publish key security metrics.
• Contribute to broader security initiatives.

Skills

Information Security

Communication

Vendor Risk Management

Tools

ISO 27001

SOC 2

GDPR

AWS

Azure

GCP

Job description

IT Security Analyst

Location: Hybrid - Buckinghamshire

Salary: £50,000 - £55,000 + Benefits

83zero are partnered with a market-leading software company who are on a mission to transform the construction and related industries through their end-to-end digital solutions. With teams across the UK, Europe, USA and India, they are delivering large-scale transformation projects on a global scale and are continuing to expand.

We are now looking for a highly organised and detail-driven IT Security Analyst to join their growing security function. This role plays a key part in securing customer trust and supplier integrity, ensuring compliance with recognised frameworks, and supporting wider security initiatives.

Overview

The Role

• Own and manage responses to customer security questionnaires (SIG, CAIQ, bespoke).
• Work cross-functionally with Legal, Compliance, Procurement, Product and Security teams.
• Maintain the security assurance matrix in line with ISO 27001, Cyber Essentials, and SOC 2.
• Act as the key point of contact for security assurance queries.
• Conduct vendor risk assessments against ISO 27001, NIST, and CIS Controls.
• Manage the third-party due diligence programme, including onboarding and periodic reviews.
• Track and publish key security metrics such as risk severity, SLA adherence, and turnaround times.
• Provide audit artefacts and support internal/external audits.
• Contribute to broader security initiatives and continuous improvement within the organisation.

Qualifications

• 3+ years' experience in Information Security, GRC, or Vendor Risk Management.
• Strong experience issuing or responding to security questionnaires.
• Knowledge of ISO 27001 Annex A, SOC 2, and GDPR/CCPA.
• Excellent communication skills, able to translate technical risk to non-technical stakeholders.
• Eligible to work in the UK and able to pass background checks.

Desirable:

• Certifications such as CRISC, CISSP, CISA, or ISO 27001 Lead Auditor.
• Familiarity with SaaS/cloud platforms (AWS, Azure, GCP).
• Understanding of secure software supply chains (SBOM, SLSA).

Benefits

• £50,000 - £55,000 base salary
• 25 days annual leave + public holidays (increasing with service)
• Matched pension scheme
• Private medical insurance & life assurance
• Fitness allowance
• Paid study leave & volunteering days
• Flexible hybrid working
• Excellent career development and training opportunities