Security Analyst (GRC)

CPS Group (UK) Limited; Cardiff; Hybrid; GBP 38,000 - 45,000; Full time

Job summary

A financial services recruiting firm is seeking a Security Analyst (GRC) in Cardiff to enhance and safeguard digital infrastructure. Responsibilities include monitoring systems, managing security incidents, and conducting vulnerability assessments. Ideal candidates should have relevant qualifications and strong experience in security analytics. This role offers flexibility with a hybrid work model and up to £45,000 plus benefits.

Benefits

Excellent benefits

Qualifications

• Strong experience in a Security Analyst role is ideal.
• Proactive, curious, detail-oriented approach to problem-solving.
• Excellent written and verbal communication skills.

Responsibilities

• Monitor systems and networks for suspicious behavior.
• Investigate and manage security incidents, performing root cause analysis.
• Conduct vulnerability assessments and coordinate remediation activities.

Skills

SIEM and SOAR platforms

Log analytics

Security frameworks

Azure security configuration

Firewalls (CheckPoint, VMware NSX)

Education

Relevant qualifications in IT Security, GRC

Tools

Log analytics tools

Dashboards and visualisation tools

XDR solutions

Job description

Security Analyst (GRC)

Cardiff–based office (Hybrid – Very Flexible)

Up to 45,000 + Excellent Benefits

CPS Group are delighted to be supporting our financial services client in their search for a Security Analyst (GRC) to join their growing, forward–thinking Security team on a permanent basis.

This is an exciting opportunity to play a key role in safeguarding digital infrastructure, enhancing security controls, and ensuring the resilience of systems, networks, and data across both cloud and on–prem environments.

If you're looking to thrive in dynamic environments, and want your work to have a tangible impact, this is a fantastic time to join a business that truly values its people, invests in technology, and encourages professional growth.

The Role:

• Monitor systems, networks, and user activity to detect suspicious behaviour or policy violations
• Investigate and manage security incidents, carrying out root cause analysis and reporting
• Deploy, configure, and maintain key security platforms used by the analyst team
• Conduct vulnerability assessments and coordinate remediation activities
• Support patch management and compliance reporting
• Perform regular reviews and health checks on security controls
• Create and enhance measures to demonstrate the effectiveness of security controls
• Assist with internal and external security assessments and audits
• Update and maintain incident response plans, playbooks, and procedures
• Provide 3rd–line support to IT colleagues and the wider business

Technical Skills:

• SIEM and SOAR platforms
• Log analytics, rule creation, tuning, and threat hunting
• Familiarity with security frameworks
• Azure and M365 security configuration and alert investigation
• Dashboards and visualisation tools
• Firewalls (CheckPoint, VMware NSX)
• Windows Server and Desktop environments
• XDR solutions – tuning and alert investigation

Experience:

• Ideally, have strong experience in a similar role
• Relevant qualifications in IT Security, GRC etc.
• A proactive, curious, and detail–oriented approach to problem–solving
• Excellent communication skills, both written and verbal, with the ability to simplify technical issues
• Confidence working with large data sets and security analytics tools

If interested, please apply today or contact Sam John at CPS Group for more information.

By applying to this advert you are giving CPS Group (UK) Ltd authority to hold and process your data for this specific role and any other roles we may deem suitable to you over time. We will not pass your data to any third party without your verbal or written permission to do so. All incoming and outgoing calls are recorded for training and compliance purposes. CPS Group (UK) Ltd is acting as an Employment Agency in relation to this vacancy. Our new privacy policy can be found here.