SOC Analyst

TalentHawk; Greater London; Hybrid; GBP 39,000 - 65,000; Full time

Job summary

TalentHawk is seeking a Senior Security Operations Analyst for a permanent hybrid role in London. You will lead incident response and expand security tooling across SOC, DLP, IAM, and vulnerability management.

You will act as deputy to the Security Operations Lead during incidents and coordinate with IT, MSPs, and Data Governance teams, while running security awareness initiatives. The ideal candidate holds a technical degree and security certifications (CISSP/CISM/GIAC) with hands‑on IAM, DLP,

Qualifications

• Bachelor’s degree (or equivalent) in a technical discipline.
• Security certifications (CISSP, CISM, GIAC/GSEC, CIPP/E, CIPM) or IT governance/IAM preferred.
• Hands-on experience with DLP tools, data classification, IAM systems and EPM.
• Experience with Okta, Azure AD, SailPoint/Idera deployments.
• Strong stakeholder engagement with senior leaders.

Responsibilities

• Lead cross-functional security initiatives and incident response.
• Oversee IAM, DLP, and vulnerability management tooling integrations.
• Serve as deputy to the Security Operations Lead during active incidents.
• Conduct security change management and risk assessments.
• Run security awareness programs and phishing simulations.
• Collaborate with IT, MSPs, and governance/privacy teams.

Skills

IGA / PAM / EPM

DLP tools

Okta / Azure / SailPoint

Endpoint Privilege Management

Data Classification

Privacy & Governance

Stakeholder Management

Education

Bachelor's degree in a technical discipline

Job description

Senior Security Operations Analyst - Permanent - Hybrid London - up to £65k

Reporting To:

Security Operations Lead

About the Client

Our client is a leading organisation protecting the IP, data, and digital assets of thousands of professionals and enterprise partners.

Role Overview

As a Senior Security Operations Analyst, you will play a pivotal role in safeguarding critical enterprise data, employee environments, and stakeholder systems. You will lead cross‑functional security initiatives, drive incident response, and expand existing security tooling integrations across key domains including SOC, DLP, IAM, and Vulnerability Management. This role also serves as operational deputy to the Security Operations Lead during incident response scenarios.

Key Responsibilities

• Identity Governance & Privileged Access (IGA / PAM / EPM): Define functional specifications for IGA/PAM solutions, ensure platform health and support, and oversee day‑to‑day operational IAM processes (including Okta, Azure AD, SailPoint, and EPM rollouts).


• Data Loss Prevention (DLP): Maintain and support DLP controls, establish business functional specifications, and manage day‑to‑day DLP oversight.


• Security Operations & Incident Response: Respond to SOC escalations, oversee enterprise vulnerability remediation, and serve as deputy for the Security Operations Lead during active incidents.


• Security Change Management: Assess security risk postures regarding organisational changes and document configuration decisions to prevent compatibility or access friction.


• Training & Awareness: Help run internal security awareness programmes, phishing simulations, and general cybersecurity best‑practice education.


• Stakeholder & Vendor Collaboration: Build strong relationships across operational IT, Application Support, Managed Service Providers (MSPs), and Data Governance/Privacy teams.

Key Requirements & Qualifications

• Education: Bachelor’s degree (or equivalent experience) in a technical discipline.


• Certifications (Preferred): One or more security credentials (CISSP, CISM, GIAC/GSEC, CIPP/E, CIPM) or IT governance/IAM certifications (ITIL, Microsoft AD).


• Technical Expertise: Hands‑on experience with DLP tools, Data Classification, Access Management/Federation systems (Okta, Azure, SailPoint/Idera), and Endpoint Privilege Management (EPM).


• Privacy & Governance: Deep understanding of data privacy guidance, including structured/unstructured personal data handling and deletion processes.


• Stakeholder Management: Proven track record of interfacing with senior leadership, internal technical teams, and external IT partners.

Core Competencies

• Pragmatic Decision‑Making: Balances short‑ and long‑term implications to support overall risk posture; takes full ownership of security outcomes.


• Solution‑Oriented Delivery: Constructively challenges legacy processes to introduce modern best practices and resolve complex technical blockers.


• Translates Complexity: Able to synthesize technical threats and compliance data into actionable advice for non‑technical business partners.