Senior IT Security Analyst - Hybrid, Protect Data

Macmillan Cancer Support; Greater London; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

Macmillan Cancer Support is seeking a Senior Information Security Analyst to oversee security across information and IT systems. The role is hybrid with 1 day in the office per month, split between our London, Shipley and Glasgow offices, and a 34.5-hour work week.

You will monitor alerts, shape secure development, support ISO 27001 compliance, and work with developers and teams to embed security while balancing organisational needs.

Qualifications

• Solid experience in information security across technical and organisational environments.
• Familiar with common information security frameworks and security solutions.
• Ability to communicate complex security issues clearly to varied audiences.

Responsibilities

• Monitor and triage security alerts, tickets and incidents, escalating as needed.
• Help design and assure security into projects and technology changes from the outset.
• Support network and infrastructure teams with firewall configuration and security controls.
• Monitor and configure security technology landscape (SIEM, endpoint protection, PAM, MFA).
• Review security configurations and processes for improvements.
• Work with developers to embed secure development practices.
• Support ISO 27001 compliance, regulatory attestation and evidence gathering.
• Proactively monitor vulnerabilities, threats and industry trends.

Skills

SIEM

Vulnerability scanning

Endpoint protection

Firewalls

IDS/IPS

WAFs

Network security

Infrastructure hardening

Patch management

Windows Server/Desktop

Cloud security Azure

Privileged access management

Multi-factor authentication

Cryptographic controls

Secure development

OWASP principles

GDPR

ISO 27001

Job description

Macmillan Cancer Support is seeking a Senior Information Security Analyst to oversee security across information and IT systems. The role is hybrid with 1 day in the office per month, split between our London, Shipley and Glasgow offices, and a 34.5-hour work week.

You will monitor alerts, shape secure development, support ISO 27001 compliance, and work with developers and teams to embed security while balancing organisational needs.