SecOps Analyst: ISO 27001 & Cloud Security

Unity Advisory; Greater London; Hybrid; GBP 55,000 - 75,000; Full time

Job summary

Unity Advisory is seeking a Sec Ops Analyst to own hands-on security monitoring across Microsoft 365, Azure, Entra ID, AWS and Databricks. You will work with the managed SOC to investigate alerts, close monitoring gaps, and ensure audit-ready evidence for ISO/IEC 27001:2022.

This truly hybrid role involves running phishing simulations, supporting audits, and communicating findings to both technical and non-technical stakeholders, with a focus on strong incident management and client security

Qualifications

• Hands-on SecOps experience using SIEM, EDR/XDR and cloud/identity telemetry, ideally with a managed SOC.
• Practical Microsoft security experience (Sentinel, Defender, Entra ID, Purview) and exposure to AWS; Databricks familiarity a plus.
• Demonstrable ISO/IEC 27001:2022 experience - collecting and presenting control evidence, resolving gaps, supporting audits.
• Experience completing client security assurance questionnaires.
• Strong analytical and stakeholder-management skills, comfortable managing multiple incidents and audit requests at once.

Responsibilities

• Monitor, correlate and triage security alerts and activity across Microsoft 365, Azure, Entra ID, AWS, Databricks, endpoints and network services, using native tools and the central SIEM.
• Act as the primary internal contact for the managed SOC, owning incidents, escalations and follow-up through to resolution within agreed service levels.
• Close monitoring gaps by improving detection use cases, alert logic, playbooks and escalation criteria.
• Own the evidence cycle for ISO/IEC 27001:2022 controls - mapping, collecting and maintaining audit-ready evidence, and resolving gaps with control owners.
• Support internal, certification and surveillance audits, tracking findings and corrective actions to closure.
• Monitor privileged access and authentication activity, review vulnerability findings, and use Microsoft Purview to manage data protection and DLP risk.
• Complete customer and third-party security assurance questionnaires with accurate, evidence-backed responses.
• Run phishing simulations and security-awareness activity, and report on incidents, vulnerabilities and control evidence to technical and non-technical stakeholders.

Skills

SIEM/EDR/XDR

Microsoft security

ISO 27001

Stakeholder management

Tools

Microsoft Sentinel

Microsoft Defender

Entra ID

Purview

AWS

Databricks

Job description

Unity Advisory is seeking a Sec Ops Analyst to own hands-on security monitoring across Microsoft 365, Azure, Entra ID, AWS and Databricks. You will work with the managed SOC to investigate alerts, close monitoring gaps, and ensure audit-ready evidence for ISO/IEC 27001:2022.

This truly hybrid role involves running phishing simulations, supporting audits, and communicating findings to both technical and non-technical stakeholders, with a focus on strong incident management and client security