Senior Security Analyst at Inspired Thinking Group – Birmingham, England, United Kingdom

Dataleum; Birmingham; On-site; GBP 40,000 - 70,000; Full time

Job summary

A forward-thinking company is seeking a passionate Senior Security Analyst to enhance its information security and data protection team. This role involves conducting comprehensive assessments, overseeing vulnerability management, and developing security policies. The ideal candidate will possess strong technical expertise, a level 4 qualification in Cybersecurity, and a commitment to mentoring junior analysts. Join this innovative firm to play a crucial role in safeguarding sensitive information and driving best practices in security. If you thrive in a dynamic environment and are eager to grow your skills, this opportunity is perfect for you.

Qualifications

• 2-4 years of experience in information security or related field.
• Strong technical expertise in security tools and methodologies.

Responsibilities

• Conduct security assessments and vulnerability management.
• Develop and update security policies and procedures.
• Mentor junior analysts and provide guidance.

Skills

Information Security

Vulnerability Management

Risk Mitigation

Security Incident Response

Analytical Skills

Problem-Solving

Communication Skills

Education

Level 4 qualification in Cybersecurity

Equivalent experience in Information Technology

Tools

CompTIA Security+

Cisco CCNA

CISMP

Job description

We are looking for an enthusiastic and detail-oriented Senior Security Analyst to join our growing information security and data protection team.

The Role:

The Senior Security Analyst is an experienced security professional responsible for performing more advanced security and data protection tasks with a higher level of autonomy. In this role, you will be responsible for conducting comprehensive security and data protection assessments, overseeing vulnerability management, developing and updating security and data protection policies, reviewing configurations, and providing expert guidance to the organization. You will be expected to operate with minimal supervision and mentor junior analysts as needed.

This is a full-time position with some mentoring responsibilities. Occasional after-hours work may be required for incident response or urgent security tasks.

Successful candidates will be enrolled on a fully funded level 6 Cyber Security Risk Analyst apprenticeship and will be provided with mentoring support to help you grow and learn. Upon successful completion of the level 6 qualification, it is anticipated that you will be able to progress to a fully funded level 7 qualification (MSc) in Cyber Security.

Responsibilities:

KPI Reporting & Metrics Analysis:

• Lead the accurate tracking of KPIs related to security and data protection performance and risk management.
• Analyse data to identify trends, areas of improvement, and potential security and data protection risks.
• Prepare detailed reports for management and advise on mitigation strategies.

Lead Security Assessments:

• Perform risk assessments, vulnerability assessments, and commission penetration tests with minimal supervision.
• Prioritize and manage findings, providing actionable recommendations for remediation.
• Conduct security and data protection audits and collaborate with IT and development teams to identify weaknesses.
• Completes security and data protection assessments from clients.

Policy & Standards Development:

• Develop and update security and data protection policies, procedures, standards, and guidance to align with industry best practices and regulatory requirements.
• Review policies and provide recommendations for improving the organisation’s security and data protection posture.
• Supports the implementation of privacy policies and ensuring privacy by design and by default in company operations.
• Helps with data mapping, DPIAs (Data Protection Impact Assessments).

Configuration Reviews:

• Conduct detailed configuration reviews of systems, networks, and applications.
• Work with cross-functional teams to ensure that security configurations meet established standards.

Vulnerability Management:

• Oversee the identification and remediation of vulnerabilities across systems.
• Coordinate vulnerability scanning, patching, and remediation efforts with internal teams.
• Provide leadership in addressing critical vulnerabilities and mitigating risks.

Incident Response

• Support the incident management leads, helping to coordinates the response to security incidents, including data breaches, system compromises, or attacks.

Application Security

• Work with development teams to embed secure coding practices.
• Conduct regular security assessments of the company’s software, including the proprietary products sold to clients.

Collaboration & Communication:

• Provide security and data protection guidance to internal stakeholders, ensuring security considerations are incorporated into development and operational practices.
• Participate in ongoing security and data protection awareness training initiatives.
• Mentor and support junior analysts, assisting in their professional development.

Requirements

• Level 4 qualification in Cybersecurity, Information Technology or a related field, or equivalent experience.

• 2-4 years of experience in information security or a related field.

• CompTIA Security+, Cisco CCNA, CISMP, or other entry-level certifications are preferred, but not essential.

• Proven experience with security assessments, vulnerability management, risk mitigation, and security incident response.

• Strong technical expertise in security tools, technologies, and methodologies.

• In-depth knowledge of security frameworks and best practices (e.g., NIST, ISO 27001).

• Ability to work autonomously and manage multiple tasks simultaneously.

• Exceptional problem-solving, investigative, and analytical abilities.

• The adaptability to do a range of work, sometimes complex and non-routine, in different environments

• The ability to work under direction, use discretion, and determine when to escalate issues.

• Strong written and verbal communication skills, with the ability to interact effectively with both technical and non-technical stakeholders.