Junior Cyber Security Analyst

WH Smith PLC; City Of London; Hybrid; GBP 28,000 - 36,000; Full time

Benefits offered by this job

Hybrid Working Model from home and in‑

4pm Friday Finish

Flexible Working

Birthday off and extra days holiday

Company Pension scheme

Annual Bonus

Job summary

WHSmith Europe invites a junior cyber security analyst to join a supportive team, gaining hands-on exposure across monitoring, vulnerability management, GRC and awareness initiatives. You will be mentored by experienced security professionals and develop through real-world exposure while the business continues to adapt to evolving organisational needs.

The role suits a recent graduate or early career entrant with a genuine interest in cyber security, eager to learn, and capable of working in a

Qualifications

• Genuine interest in cyber security and a career in the field.
• Foundational IT and security concepts understanding (networking, threats, attacks).
• Strong analytical and problem-solving skills with attention to detail.
• Clear written and verbal communication, and willingness to learn.

Responsibilities

• Monitor security alerts from SIEM and other tooling; triage and escalate as needed.
• Investigate suspicious activity and incidents; assist with remediation and reporting.
• Assist with risk assessments, policy maintenance, audits and supplier reviews.
• Support security awareness campaigns and phishing simulations; assist with access reviews.

Skills

Cyber security interest

Analytical thinking

Attention to detail

Clear communication

Team player

Education

Degree or apprenticeship in cyber security or related IT

Tools

Security tooling exposure

Job description

PLEASE NOTE: As part of our organisational changes, our ongoing structure and roles continue to be reviewed. While this role is being advertised, circumstances may change and the role could be withdrawn/amended.

At WHSmith Europe our people are at the heart of everything we do. They are the ones that go the extra mile for our customers, the ones that enable our growth. This is a fantastic opportunity for a recent graduate (or someone early in their cyber career) to launch into information security within a supportive team that will invest in your development. As a Junior Cyber Security Analyst you'll get hands‑on exposure across the full breadth of the function - from monitoring and responding to threats, to vulnerability management, security awareness and governance & compliance. No two days are the same, and you'll be mentored by experienced security professionals every step of the way.

We care about your aptitude, curiosity and attitude far more than your qualifications on paper. If you're keen to learn, methodical, and genuinely interested in cyber security, we want to hear from you.

What you will be doing:

Security Monitoring & Incident Response

• Monitor and triage security alerts from our SIEM and other security tooling, escalating where needed
• Help investigate suspicious activity, phishing reports and potential incidents, supporting the team through to resolution
• Maintain clear, accurate records of investigations and actions taken

Vulnerability Management

• Run and review vulnerability scans across our systems and applications
• Help track and chase remediation activity with technology teams, and report on progress
• Support monitoring of our external attack surface

Governance, Risk & Compliance (GRC)

• Assist with risk assessments, security policy maintenance and audit activity
• Support compliance work, including PCI DSS and third-party / supplier security reviews
• Help keep security documentation and records up to date

Security Awareness & Team Support

• Help deliver security awareness campaigns and phishing simulation exercises
• Support user access reviews and other recurring security processes
• Provide general day‑to‑day support to the wider Information Security team

What we are looking for:

• A genuine interest in cyber security and a strong desire to build a career in the field
• A foundational understanding of core IT and security concepts (e.g. networking basics, common threats, how attacks work)
• Strong analytical and problem‑solving skills, with good attention to detail
• Clear written and verbal communication, and the confidence to ask questions
• A methodical, organised approach and the ability to manage your own workload
• A collaborative team player who is eager to learn and take on feedback
• A degree, apprenticeship or relevant study in cyber security, computer science or a related IT subject - desirable
• Any hands‑on exposure to security tooling, labs, home projects, CTFs or coursework - desirable
• Awareness of frameworks and standards such as PCI DSS, ISO 27001 or NIST - desirable
• An entry‑level certification (e.g. CompTIA Security+, BTL1, SC-900) or working towards one - desirable

How we reward our teams:

• Hybrid Working Model from home and in the office
• 4pm Friday Finish
• Flexible Working
• 24Days holiday, plus your Birthday off, plus Bank Holidays with an opportunity to buy extra days holiday
• Family Friendly Leave
• Company Pension scheme
• Annual Bonus based on company and personal performance
• Competitive Salary
• Cycle to work scheme
• Staff Discount Card for railway stores (subject to policy)

About us:

Celebrating over 230 years, we're proud to have grown into a globally recognised brand present in over 30 countries - the air of familiarity people love and trust on their journey. As a diverse group of over 6,000 colleagues, we're all on the same journey to a better business through our commitments to our planet, people and the communities we serve.

Our business operates from two key locations, In a vibrant area of London, close to Aldgate and Liverpool Street Station, while the other is located at Swindon's International Business Park, just off the M4 with excellent transport links and over 100 on‑site parking spaces.

For WHSmith Europe, our mission is simple - to create value for our stakeholders by providing a platform for global brands across airports, hospitals, rail stations and other markets. Our operational environment is fast‑paced and highly regulated, requiring exceptional standards of maintenance, compliance, health & safety and colleague welfare across every location.

We're all about creating an inclusive and welcoming workplace where everyone can be themselves and do their best. No matter your background, age, disability, gender, gender expression, gender identity, race or ethnicity, marital status, religion, sex, sexual orientation or anything else that makes you, you-you're welcome here.

We're also open to flexible working where possible, so if that's something you need, let's chat. And if you need any adjustments during the selection process, just let our Talent Acquisition team know-we're happy to help!