Security Analyst, GRC (Remote) — Path to Advisory

Provn Inc.; Scotland; Remote; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Remote role with occasional office/SCO

Quarterly incentives

Benefits package

Job summary

Provn Inc. is seeking an Information Security Analyst to join our team and help govern and deliver security across our client base.

The role emphasizes governance, risk and compliance over hands-on engineering, with a clear path toward security advisory and virtual CISO work. You’ll collaborate with infrastructure engineers, service delivery teams and partners to translate security insights into practical actions, focusing on risk prioritisation and client-facing reporting.

Qualifications

• Experience with IT support, infrastructure or security operations in a professional setting.
• Strong understanding of Windows endpoints, Microsoft 365 and identity management.
• Ability to translate security concepts into clear policies and reports.

Responsibilities

• Review security alerts and findings and coordinate follow-ups with teams.
• Track vulnerabilities and patching through to resolution with engineering.
• Assess Microsoft 365 and endpoint security posture across clients and provide improvements.
• Draft and maintain security policies, standards and procedures for clients.
• Support incident triage and escalate serious issues as needed.
• Turn security information into clear client-facing reporting.

Skills

IT support background

Windows endpoints

Microsoft 365 security

Identities & networking

Risk awareness

Policy writing

Education

CompTIA Security+

Microsoft SC-900

Tools

Microsoft Defender

Intune

Entra ID

CrowdStrike

Fortinet

ConnectWise

Job description

Provn Inc. is seeking an Information Security Analyst to join our team and help govern and deliver security across our client base.

The role emphasizes governance, risk and compliance over hands-on engineering, with a clear path toward security advisory and virtual CISO work. You’ll collaborate with infrastructure engineers, service delivery teams and partners to translate security insights into practical actions, focusing on risk prioritisation and client-facing reporting.