IT Security Analyst

Harvey Nash Group; Leeds; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

Harvey Nash Group in Leeds is seeking a Senior IT Security Analyst to strengthen Microsoft security across our hybrid IT estate. The role focuses on identity, data protection and security controls, working with stakeholders to drive improvements and promote a security-conscious culture.

The ideal candidate has hands-on experience with Microsoft Entra ID, M365, Azure and AD, and with IAM, DLP and information protection.

Qualifications

• Experience in Information Security or Cyber Security disciplines.
• Strong knowledge of Microsoft security technologies (Entra ID, M365, Azure, AD).
• Experience implementing or improving security controls (IAM, RBAC, DLP, Information Protection).
• Familiarity with security frameworks (ISO 27001, NIST, Cyber Essentials Plus).

Responsibilities

• Manage and enhance Microsoft security, compliance and data protection controls.
• Lead the administration and improvement of Microsoft Purview, DLP, and information protection capabilities.
• Support IAM activities including RBAC and access reviews.
• Identify risks, vulnerabilities, and control gaps; drive remediation.
• Support security incident investigations, reporting and escalation.
• Assist audits and maintain control evidence.

Skills

Microsoft Purview

Microsoft Entra ID

Microsoft 365

Azure

Active Directory

IAM

RBAC

DLP

Information Protection

ISO 27001

NIST

Cyber Essentials Plus

Security reporting

Stakeholder management

Tools

Microsoft Purview

Job description

Senior IT Security Analyst Influential UK Financial Services Organisation | Hybrid Working Are you an experienced Security Analyst looking to play a hands-on role in strengthening security controls across a modern Microsoft technology estate? We're supporting an influential UK Financial Services organisation as they continue to invest in their Information Security capability. This role will focus on Microsoft security, identity and data protection technologies, helping to safeguard critical business systems, data and users while driving continuous improvement across the security landscape. Working closely with senior security stakeholders, you'll take ownership of key security controls, identify opportunities for enhancement, support incident response activities and help embed a strong security culture across the organisation.

Key Responsibilities

• Manage and enhance Microsoft security, compliance and data protection controls across the organisation.
• Lead the administration and continuous improvement of Microsoft Purview, Data Loss Prevention (DLP) and information protection capabilities.
• Support identity and access management activities, including role-based access control (RBAC), access reviews and Joiner-Mover-Leaver processes.
• Identify security risks, vulnerabilities and control gaps, driving remediation activity where required.
• Support security incident investigations, coordination, reporting and escalation.
• Assist with audits, compliance activities and the maintenance of security control evidence.
• Produce meaningful security reporting and insights for stakeholders.
• Collaborate with internal teams, managed service providers and third-party suppliers to improve security processes and controls.
• Contribute to security awareness initiatives and promote best practice across the business.
• Stay abreast of emerging cyber threats, technologies and industry trends to strengthen organisational resilience.

Essential Experience

• Experience within Information Security, Cyber Security or a closely related discipline.
• Strong understanding of Microsoft technologies including Microsoft Entra ID, Microsoft 365, Azure and Active Directory.
• Experience implementing, operating or enhancing security controls across areas such as:
  • Identity & Access Management (IAM)
  • Identity Governance
  • Data Loss Prevention (DLP)
  • Information Protection
• Experience working with Role-Based Access Controls (RBAC) and access governance processes.
• Familiarity with security frameworks and standards such as ISO 27001, NIST or Cyber Essentials Plus.
• Comfortable engaging with a broad range of technical and non-technical stakeholders.
• Strong understanding of data protection principles and their application within security controls.

Desirable Experience

• Experience within Financial Services or another regulated environment.
• Knowledge of UK GDPR and wider data protection requirements.
• Experience with Microsoft Purview and/or Entra Identity Governance
• Experience facilitating workshops, reviews or security-focused stakeholder sessions.
• Experience working alongside managed service providers or external security partners.

Key Skills

• Strong communication and stakeholder management skills.
• Ability to influence and challenge constructively.
• Analytical approach to problem solving and risk assessment.
• Excellent organisation and attention to detail.
• Self-motivated with the ability to manage priorities independently.
• Pragmatic, risk-based mindset with a focus on delivering practical security outcomes.

What We're Looking For

Successful candidates are likely to demonstrate experience across security projects, identity governance, access controls, supplier security reviews, risk management or broader cyber security initiatives. Exposure to cloud-based environments and Microsoft security technologies will be particularly valuable. This is an excellent opportunity to join a growing security function where you'll have genuine influence over security controls, risk reduction initiatives and the future direction of the organisation's Microsoft security capabilities.