IT Security Analyst

83zero Ltd; Middlesbrough; On-site; GBP 50,000 - 60,000; Full time

Job summary

A leading software company is seeking an experienced IT Security Analyst to join their team in a hybrid role. This position involves managing security questionnaires, conducting risk assessments, and ensuring compliance with key standards like ISO 27001 and SOC 2. The ideal candidate has over 3 years of experience in Information Security and excellent communication skills. The role offers a competitive salary between £50,000 and £60,000, along with substantial benefits including flexible working and career development opportunities.

Benefits

25 days annual leave + public holidays

Matched pension scheme

Private medical insurance & life assurance

Fitness allowance

Paid study leave & volunteering days

Excellent career development and training opportunities

Qualifications

• 3+ years' experience in Information Security, GRC, or Vendor Risk Management.
• Strong experience issuing or responding to security questionnaires.
• Knowledge of ISO 27001 Annex A, SOC 2, and GDPR/CCPA.
• Eligible to work in the UK and able to pass background checks.

Responsibilities

• Own and manage responses to customer security questionnaires.
• Work cross-functionally with Legal, Compliance, Procurement, Product and Security teams.
• Maintain the security assurance matrix in line with ISO 27001, Cyber Essentials, and SOC 2.
• Conduct vendor risk assessments against ISO 27001, NIST, and CIS Controls.
• Manage the third-party due diligence programme, including onboarding and periodic reviews.

Skills

Information Security

GRC (Governance, Risk, Compliance)

Vendor Risk Management

Communication skills

Technical risk translation

Tools

ISO 27001

SOC 2

GDPR/CCPA

AWS

Azure

GCP

Job description

Overview

IT Security Analyst – Hybrid

Location: Middlesbrough (Hybrid)

Salary: £50,000 - £60,000 + Benefits

83zero are partnered with a market-leading software company who are on a mission to transform the construction and related industries through their end-to-end digital solutions. With teams across the UK, Europe, USA and India, they are delivering large-scale transformation projects on a global scale and are continuing to expand.

We are now looking for a highly organised and detail-driven IT Security Analyst to join their growing security function. This role plays a key part in securing customer trust and supplier integrity, ensuring compliance with recognised frameworks, and supporting wider security initiatives.

Responsibilities

• Own and manage responses to customer security questionnaires (SIG, CAIQ, bespoke).


• Work cross-functionally with Legal, Compliance, Procurement, Product and Security teams.


• Maintain the security assurance matrix in line with ISO 27001, Cyber Essentials, and SOC 2.


• Act as the key point of contact for security assurance queries.


• Conduct vendor risk assessments against ISO 27001, NIST, and CIS Controls.


• Manage the third-party due diligence programme, including onboarding and periodic reviews.


• Track and publish key security metrics such as risk severity, SLA adherence, and turnaround times.


• Provide audit artefacts and support internal/external audits.


• Contribute to broader security initiatives and continuous improvement within the organisation.

About You

• 3+ years' experience in Information Security, GRC, or Vendor Risk Management.


• Strong experience issuing or responding to security questionnaires.


• Knowledge of ISO 27001 Annex A, SOC 2, and GDPR/CCPA.


• Excellent communication skills, able to translate technical risk to non-technical stakeholders.


• Eligible to work in the UK and able to pass background checks.

Desirable

• Certifications such as CRISC, CISSP, CISA, or ISO 27001 Lead Auditor.


• Familiarity with SaaS/cloud platforms (AWS, Azure, GCP).


• Understanding of secure software supply chains (SBOM, SLSA).

What's on Offer

• £50,000 - £55,000 base salary


• 25 days annual leave + public holidays (increasing with service)


• Matched pension scheme


• Private medical insurance & life assurance


• Fitness allowance


• Paid study leave & volunteering days


• Flexible hybrid working


• Excellent career development and training opportunities