IT Security Analyst

Bimplus; Leatherhead; Hybrid; GBP 48,000 - 60,000; Full time

Benefits offered by this job

26 days holiday + bank holidays

8% pension employer contribution

Training budgets

PMI

Maternity and paternity benefits

Job summary

Bimplus in Leatherhead is seeking an IT Security Analyst focused on GRC and security awareness to join our hybrid team. You will support the IT Security Manager, develop and maintain security policies, and drive security awareness initiatives across the business.

The role emphasizes security awareness, phishing campaigns, policy review, risk assessments and collaboration with stakeholders. You will work with ISO27K and CE/CE+ standards, Microsoft Purview DLP, Sentinel/Defender playbooks, and

Qualifications

• Experience with security awareness and phishing campaigns.
• Experience implementing and maintaining infosec policies and procedures.
• Not a SOC role; broad IT security responsibilities.

Responsibilities

• Cyber security awareness and training.
• Policy development and compliance.
• Risk assessment and testing.
• Stakeholder collaboration and communication.
• Security operations and IR.

Skills

Security awareness

Phishing campaigns

Policy development

Risk assessment

Stakeholder communication

Security operations

Cloud security

Communications

Education

ISO27K knowledge

CE/CE+ knowledge

Tools

Microsoft Purview DLP

Sentinel/Defender playbooks

Job description

IT Security Analyst – GRC and Security Awareness focused

Location: Hybrid – Leatherhead

Your new company:

A leading construction and development company in Surrey are currently looking for an IT Security Analyst to come in and support the existing IT Security Manager with the day-to-day tasks involved with the running of the IT Security infrastructure for the organisation. You will also assist with creating and maintaining security policies, supporting operational processes, and developing security awareness initiatives.

The role responsibilities:

You will be supporting the IT Security Manager across a broad variety of work, with the ability to gain a lot of different experience across multiple areas. Crucially, this role requires strong experience with security awareness and phishing campaigns, as well as previous experience having implemented and maintained infosec policies and procedures. This is not a SOC role.

Cyber security awareness and training

• Cyber security awareness and training
• Policy development and compliance
• Risk assessment and testing
• Stakeholder collaboration and communication
• Security operations and IR

You will need:

• Standards and framework knowledge – mainly ISO27K and CE/CE+
• Experience working with Microsoft Purview DLP
• Experience of creating playbooks for Sentinel/Defender and reviewing policies
• Technical skills and strong communication skills
• Willingness to get stuck in and converse with other business departments.
• Experience with risk assessments
• Knowledge of cloud security principles
• To undergo a BPSS security check.

What you’ll get in return:

This role is available for hybrid working with a typical requirement to work 2 days per week in the Leatherhead office. Good salary, up to the £60k mark.

• 26 days holiday plus bank holidays
• 8% pension employers' contribution
• Training budgets
• PMI
• Strong maternity and paternity benefits.
• And more!