Security Incident Management Analyst

Cyber Security training courses; Inverness, Preston; Remote; GBP 101,000 - 120,000; Part time

Job summary

Security Incident Management Analyst role based in Inverness or Preston with 5 days onsite. Duration until 16/04/2027 with possible extension. Rate £550-£650 Inside IR35. This governance/co-ordination position does not perform SOC monitoring or technical remediation.

Pre-employment checks including identity and DBS will be conducted if offered this position. Experience in cyber security, service management, or governance is essential, with strong reporting and stakeholder coordination skills.

Qualifications

• Experience in cyber security, service management, or operational governance roles.
• Understanding of security incident management processes and escalation paths.
• Ability to coordinate multiple suppliers and stakeholders across SIAM environments.
• Strong organizational and reporting skills; attention to audit readiness.

Responsibilities

• Support incident tracking from identification to closure across suppliers.
• Maintain incident records and ensure timely updates by suppliers.
• Produce routine incident reports and dashboards for governance forums.
• Assist in governance and process compliance with client security policies.

Skills

Security incident management

Governance coordination

Stakeholder coordination

Reporting & analytics

Job description

Security Incident Management Analyst - CONTRACTOR MUST BE SC CLEARED

Location: Inverness or Preston | 5 days onsite

Duration: 16/04/2027 + possible extension

Rate: £550 - £650 Inside IR35

Role Description:

The Security Incident Management Analyst operates within the Operational Integrator (OI) function in a multi-supplier (SIAM) environment, supporting the governance and coordination of security incident management activities across suppliers.

The role assists in ensuring security incidents are identified, tracked, escalated, and reported in accordance with client policies and agreed service levels. Working closely with suppliers, service management teams, and security stakeholders, the consultant supports incident visibility, reporting, governance activities, and audit readiness.

This is a governance and coordination role and does not perform Security Operations Centre (SOC) monitoring, threat hunting, incident response, or technical remediation activities.

If you are successfully offered this position, you will go through a series of pre-employment checks, including identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service)

Key Responsibilities:

Incident Tracking & Coordination

• Support the monitoring of security incidents throughout their lifecycle
• Ensure incident records are maintained and updated by suppliers
• Track incident progress from identification through to closure
• Escalate overdue, recurring, or high-impact incidents through agreed governance channels

Supplier Engagement (SIAM Model)

• Coordinate with suppliers to obtain incident updates and status reports
• Support the collection and validation of supplier incident reporting
• Ensure incident data standards and reporting requirements are applied consistently
• Identify gaps in ownership, reporting, or evidence

Incident Reporting & Visibility

• Produce routine security incident reports and dashboards
• Assist in monitoring:
• Incident volumes
• Resolution performance
• SLA compliance
• Escalation trends
• Support governance forums through accurate reporting and status updates

Governance & Process Compliance

• Support adherence to agreed incident management processes
• Ensure supplier activities align with client security policies and standards
• Assist with documenting lessons learned and improvement actions
• Support maintenance of incident governance documentation

Assurance & Evidence Support

• Collect and organise incident management evidence
• Support assurance and audit activitiesEnsure incident records remain complete, traceable, and audit-ready
• Assist in demonstrating process compliance and effectiveness

Your skills and experience

Essential

• Experience in cyber security, service management, operational governance, or support roles
• Understanding of security incident management processes
• Awareness of:
• Incident severity classifications
• Escalation processes
• Major incident management principles
• Strong organisational and reporting skills
• Ability to coordinate multiple stakeholders

Desirable

• Exposure to SIAM or multi-supplier environments
• Familiarity with incident management tooling and reporting outputs
• Understanding of ITIL Incident Management concepts
• Experience in regulated, government, or defence environments

Key Deliverables

• Incident reporting packs
• Supplier incident performance metrics
• Incident status tracking and governance records
• Audit-ready incident evidence
• Inputs to governance and operational review forums

#4831282 - Dan Sandoval