Security Incident Management Analyst

Sanderson Government & Defence; Preston; On-site; GBP 103,000 - 115,000; Full time

Job summary

Sanderson Government & Defence seeks three Security Incident Management Analysts to join a high-profile programme operating within a secure environment. Location: Inverness or Preston, five days onsite. Rate: £440–£480 per day (Inside IR35), Contract Duration: 6 months.

The role focuses on coordinating and governing security incident management across multiple service providers. You will drive incident tracking, reporting, and governance, ensuring evidence-based lifecycle management and audit

Qualifications

• Experience in cyber security, service management, governance or incident management.
• Understanding of security incident management processes and controls.
• Strong organizational, reporting and documentation skills.
• Experience coordinating multiple stakeholders across complex environments.
• Ability to manage competing priorities and attention to detail.

Responsibilities

• Incident Tracking & Coordination: monitor incidents across their lifecycle and ensure records are kept up-to-date.
• Supplier Management & Engagement: coordinate with suppliers for updates and validate reports.
• Reporting & Governance: produce dashboards, monitor SLA compliance, and support governance meetings.

Skills

Cyber security

Service management

Governance

Stakeholder management

Incident management

Tools

ITIL

SIAM tools

Reporting platforms

Job description

Security Incident Management Analyst

Contract | 3 Positions Available

Location: Inverness or Preston (5 Days Onsite)

Rate: £440 - £480 per day (Inside IR35

Contract Duration: 6 months

Clearance Required: Active SC Clearance

About the Opportunity

A leading consultancy is seeking three experienced Security Incident Management Analysts to join a high-profile programme operating within a secure and regulated environment.

Working within the Operational Integrator (OI) function in a multi-supplier (SIAM) environment, you will play a key role in coordinating and governing security incident management activities across multiple service providers. This position focuses on ensuring incidents are effectively tracked, reported, escalated, and evidenced throughout their lifecycle, while maintaining compliance with agreed policies, processes, and service levels.

This is an excellent opportunity for professionals with experience in cyber security, service management, operational governance, or incident management who enjoy working with stakeholders and driving operational excellence within complex environments.

The Role

You will support the visibility, governance, and coordination of security incidents across multiple suppliers, ensuring accurate reporting, robust audit readiness, and effective stakeholder engagement.

Key Responsibilities

Incident Tracking & Coordination

• Monitor security incidents throughout their lifecycle.
• Ensure incident records are maintained and updated by suppliers.
• Track incidents from identification through to closure.
• Escalate overdue, recurring, or high-impact incidents through appropriate governance channels.

Supplier Management & Engagement

• Coordinate with suppliers to obtain incident updates and status reports.
• Support the collection and validation of supplier reporting.
• Ensure reporting standards and data quality requirements are consistently applied.
• Identify gaps in ownership, reporting, evidence, and accountability.

Reporting & Governance

• Produce regular security incident reports, dashboards, and performance metrics.
• Monitor:
  • Incident volumes
  • Resolution performance
  • SLA compliance
  • Escalation trends
• Provide reporting and updates into governance meetings and operational review forums.

Essential Skills & Experience

• Experience within cyber security, service management, operational governance, or support functions.
• Understanding of security incident management processes and controls.
• Knowledge of:
  • Incident severity classifications
  • Escalation procedures
  • Major incident management principles
• Strong organisational, reporting, and documentation skills.
• Experience coordinating multiple stakeholders across complex environments.
• Ability to manage competing priorities and maintain attention to detail.
• Strong communication and relationship management skills.

Desirable Skills

• Experience working within SIAM (Service Integration and Management) or multi-supplier environments.
• Familiarity with incident management tools and reporting platforms.
• Understanding of ITIL Incident Management principles.
• Experience working within government, defence, critical national infrastructure, or other highly regulated sectors.
• Exposure to governance, assurance, and audit processes.

Security Requirements

• Hold active SC Clearance
• Be able to work 5 days per week onsite in Inverness or Preston

Successful candidates will also be required to complete pre-employment screening, including identity verification, nationality and immigration checks, employment history verification, and criminal record checks.

Reasonable Adjustments

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.

If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.