Security Ops & GRC Analyst — Incident Response & IAM

CyberProof; United Kingdom; Remote; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Remote work

Job summary

CyberProof in the United Kingdom seeks an experienced Information Security Analyst to join our Security Operations and GRC-focused team. The role blends hands-on security operations with governance, risk and compliance responsibilities, including incident investigation and third-party assessments.

You will own escalated security cases, investigate incidents, engage with users and technical teams, and help drive remediation while supporting security Controls reviews and supplier risk assessments

Qualifications

• Experience in Information Security, Cyber Security Operations or Security Incident Management.
• Strong security triage, investigation and analytical skills.
• Experience managing security incidents through investigation to resolution.
• Understanding of IAM and access governance.
• Exposure to GRC, third-party/supplier risk or security assurance.
• Familiarity with ISO 27001 and SOC 2.
• Experience with enterprise security platforms from Microsoft or similar.

Responsibilities

• Triage, investigate and manage escalated security incidents and tickets.
• Analyse suspicious sign-ins, potentially compromised accounts and data-protection events.
• Coordinate remediation and ensure incidents progress to resolution.
• Support GRC, access governance and security-control reviews.
• Review supplier questionnaires and security evidence (SOC 2, ISO 27001).
• Work with external security service providers on investigations and escalations.
• Identify false positives and suggest monitoring improvements.

Skills

Security operations

Incident management

Identity & Access Management

GRC awareness

SOC 2 / ISO 27001 knowledge

Stakeholder communication

Tools

Microsoft security technologies

Job description

CyberProof in the United Kingdom seeks an experienced Information Security Analyst to join our Security Operations and GRC-focused team. The role blends hands-on security operations with governance, risk and compliance responsibilities, including incident investigation and third-party assessments.

You will own escalated security cases, investigate incidents, engage with users and technical teams, and help drive remediation while supporting security Controls reviews and supplier risk assessments