Senior IT Security Analyst - Strategic Security Lead

Macmillan Cancer Support; Greater London, Saltaire, Glasgow; Hybrid; GBP 70,000 - 76,000; Full time

Job summary

Macmillan Cancer Support is seeking a Senior IT Security Analyst on a permanent, full-time basis. This hybrid role combines home and UK office presence, with a one-day-per-month office requirement across London, Shipley and Glasgow.

You will design, implement and monitor security controls, respond to incidents, and work with technology teams to embed security across projects. Proficiency in SIEM, IAM, firewall and vulnerability management is expected.

Qualifications

• Extensive information security experience across technical and organisational environments.
• Experience with common information security frameworks and security solutions.
• Strong interest in emerging threats and technologies.

Responsibilities

• Monitor and triage security alerts, tickets and incidents, escalating where needed.
• Help design and assure security into projects and technology changes from the outset.
• Support network and infrastructure teams with firewall configuration, boundary protection, IDS/IPS and other controls.
• Monitor and help configure the security technology landscape (SIEM, endpoint protection, PAM, MFA).
• Carry out regular reviews of configurations, processes and controls to identify improvements.
• Collaborate with developers to embed secure development practices across the lifecycle.
• Support ISO 27001 compliance and evidence gathering across the organisation.
• Proactively monitor vulnerabilities and emerging threats to protect data.
• Engage with third parties to ensure security expectations and controls are understood.

Job description

Macmillan Cancer Support is seeking a Senior IT Security Analyst on a permanent, full-time basis. This hybrid role combines home and UK office presence, with a one-day-per-month office requirement across London, Shipley and Glasgow.

You will design, implement and monitor security controls, respond to incidents, and work with technology teams to embed security across projects. Proficiency in SIEM, IAM, firewall and vulnerability management is expected.