IT Security Analyst

Brentwood Borough Council; Rochford; Hybrid; GBP 42,000 - 64,000; Full time

Benefits offered by this job

Hybrid working

Job summary

Brentwood Borough Council is seeking an IT Security Analyst to safeguard information assets, technology services and users across Brentwood and Rochford councils. You will operate within the Digital, Data and Technology team, handling cyber security operations, incident response and governance tasks.

The role offers hybrid working and requires collaboration across two councils, with occasional out-of-hours support for major incidents and ongoing security improvements to public services.

Qualifications

• Experience in cyber security operations, incident response and monitoring.
• Ability to interpret security risks and communicate clearly to colleagues and stakeholders.
• Knowledge of governance frameworks, policies and risk registers.
• Familiarity with cloud security, identity management and security controls.

Responsibilities

• Monitor, investigate and respond to cyber security alerts, threats and incidents.
• Maintain incident response plans and playbooks, coordinating containment and recovery.
• Lead vulnerability management activities and track remediation actions.
• Maintain and improve information security policies, standards and procedures.
• Support cyber risk management and maintain the security risk register.
• Assist with audits and security assurance activities.
• Provide secure‑by‑design advice for new systems and cloud services.
• Review supplier security arrangements and assess technical security evidence.
• Deliver security awareness and phishing simulations.

Skills

Cyber security operations

Incident response

Vulnerability management

Security monitoring

Security governance

Risk assessment

Education

Bachelor's degree or equivalent

Tools

Microsoft 365

Azure

Entra ID

SIEM

Endpoint protection

Job description

(Starting salary dependent upon skills and qualifications, progression subject to satisfactory performance) Do you want to play a key role in protecting the information, systems and services of two ambitious councils? Are you passionate about cyber security, risk management and building resilient digital services? Do you have the technical knowledge and practical experience to identify threats, respond to incidents and help colleagues work securely? Brentwood Borough Council and Rochford District Council have formed a strategic partnership, sharing knowledge, experience and projects for the benefit of both councils. We are seeking a motivated and knowledgeable IT Security Analyst to join our Digital, Data and Technology team. As IT Security Analyst, you will help safeguard the Councils' information assets, technology services and users. You will undertake operational cyber security activities, support the development of our security governance arrangements and provide practical advice to projects, services and colleagues across both councils. You will

• Monitor, investigate and respond to cyber security alerts, threats and incidents.
• Maintain incident response plans and playbooks, coordinating containment, recovery and post-incident reviews.
• Lead vulnerability management activities and track remediation actions through to completion.
• Maintain and improve information security policies, standards and procedures.
• Support cyber risk management and maintain the security risk register.
• Assist with Cyber Essentials Plus, audits and wider security assurance activities.
• Provide secure-by-design advice for new systems, digital projects and cloud services.
• Advise on identity and access management, Conditional Access, multi-factor authentication, privileged access, endpoint protection, encryption and network security.
• Review supplier security arrangements and assess technical security evidence.
• Support Data Protection Impact Assessments and compliance with UK GDPR and the Data Protection Act 2018.
• Deliver security awareness activities and phishing simulation programmes.

You will have practical experience of cyber security operations, including incident response, vulnerability management and security monitoring. You will understand cyber security risks and controls and be able to explain technical issues clearly to colleagues, suppliers and senior stakeholders.

You will have knowledge or experience of:

• Microsoft 365, Azure and Entra ID security.
• Security monitoring, endpoint protection and SIEM technologies.
• Identity and access management, MFA and Conditional Access.
• Cyber risk assessment and security risk registers.
• Cloud security and secure system configuration.
• Supplier assurance and third-party security risk.
• Cyber security awareness and user education.

Experience of local government or another public sector environment, together with knowledge of Cyber Essentials Plus, the NCSC Cyber Assessment Framework or ISO 27001, would be advantageous. You will be collaborative, organised and able to balance security requirements with the practical needs of council services. You will promote a positive and pragmatic security culture, helping colleagues to understand that effective cyber security enables safe and reliable public services.

Working arrangements

We offer hybrid working, but the role operates across both councils and you will be expected to work regularly from the Brentwood and Rochford offices. The role may occasionally require work outside normal hours to support the response to significant cyber security incidents.

Why join us?

You will be part of a forward-thinking Digital, Data and Technology team working across two councils. This is an opportunity to influence our approach to cyber security, improve organisational resilience and protect services that make a real difference to residents and employees. We offer flexible and agile working, a supportive working environment, opportunities for professional development and a commitment to equality of opportunity.