Senior Information Security Analyst: Lead Security Across Teams

Macmillan Cancer Support; City of Westminster; On-site; GBP 65,000 - 90,000; Full time

Job summary

Macmillan Cancer Support is seeking a Senior Information Security Analyst to oversee information and IT security across the organisation. You will monitor alerts, triage incidents, and help design secure projects from the outset, while supporting network and infrastructure security configurations and compliance with ISO 27001 and GDPR.

The role requires collaboration with developers and stakeholders to embed secure practices throughout the development lifecycle.

Qualifications

• Solid experience working in information security and across technical and organisational environments.
• Experience with information security frameworks and security solutions.
• Interest in emerging threats and technologies.
• Ability to communicate complex security issues clearly to different audiences.

Responsibilities

• Monitor and triage security alerts, tickets and incidents.
• Help design and assure security into projects from outset.
• Support network and infrastructure security controls.
• Configure and monitor security technologies (SIEM, MFA, PAM).
• Promote secure development practices across the lifecycle.
• Support ISO 27001 compliance and evidence gathering.
• Monitor vulnerabilities and industry threats.
• Engage with third parties on security expectations.

Skills

Security monitoring

Security triage

Secure development

ISO 27001

GDPR

Cloud security

Privileged access management

MFA

Tools

SIEM

Endpoint protection

Firewalls/IDS-IPS

Web Application Firewalls

Azure

Job description

Macmillan Cancer Support is seeking a Senior Information Security Analyst to oversee information and IT security across the organisation. You will monitor alerts, triage incidents, and help design secure projects from the outset, while supporting network and infrastructure security configurations and compliance with ISO 27001 and GDPR.

The role requires collaboration with developers and stakeholders to embed secure practices throughout the development lifecycle.