Job Description:
Reference: INET/CSA/Oct26
Location: Hounslow
Salary: £45,000.00 to £55,000.00 (Based on the experience)
Job Open date: 16th October 2026
Close date: 15th November 2026
Job Overview
We are seeking a skilled Cyber Security Analyst to support our organisation’s information security, risk management, governance and compliance activities. The successful candidate will be responsible for conducting security risk assessments, performing IT control audits, supporting ISO 27001 implementation, managing vulnerabilities, monitoring security alerts and coordinating incident response activities.
The ideal candidate will have a strong understanding of security frameworks, hands-on experience with industry-standard cybersecurity tools, and the ability to work effectively with IT teams and business stakeholders to strengthen the organisation’s security posture.
Key Responsibilities
- Conduct security risk assessments, maintain risk registers, track risks and recommend appropriate mitigations and compensating controls.
- Perform IT control audits covering PCI DSS, ISO 27002, information security management systems (ISMS), infrastructure and web applications.
- Support ISO 27001 implementation and maintain information security policies, standards and procedures aligned with ISO 27001, NIST and CIS frameworks.
- Apply the Secure Software Assurance Maturity Model to assess client compliance requirements for new products and architecture changes.
- Manage vulnerability assessments using Qualys, conduct SAST using SonarQube and DAST using WebInspect, prioritise remediation and support penetration testing.
- Support privileged access management using CyberArk, maintain access controls and review audit logs to ensure appropriate permissions.
- Monitor and investigate security alerts using Microsoft Sentinel and Rapid7, tune detection rules and investigate phishing and spoofed emails using Proofpoint.
- Manage security incidents, changes and releases through ServiceNow.
- Conduct root cause analysis and prepare reports for IT and business stakeholders.
- Collaborate with technical teams and business stakeholders to improve security controls and maintain compliance with relevant security standards.
Required Skills and Experience
- Experience in cybersecurity, information security, IT risk management or security governance and compliance.
- Knowledge of ISO 27001, ISO 27002, PCI DSS, NIST and CIS frameworks.
- Experience conducting risk assessments, IT security audits and remediation tracking.
- Hands-on experience with vulnerability management and application security testing tools, including Qualys, SonarQube and WebInspect.
- Familiarity with CyberArk or other privileged access management solutions.
- Experience with SIEM tools such as Microsoft Sentinel and Rapid7.
- Knowledge of email security tools such as Proofpoint.
- Experience using ServiceNow for incident, change and release management.
- Strong analytical, problem-solving, documentation and communication skills.
What We Offer
- Competitive salary based on skills and experience.
- Professional development and training opportunities.
- UK visa sponsorship
- A collaborative working environment.
- Opportunities to contribute to cybersecurity and compliance initiatives.
How to Apply
Interested candidates are invited to submit their CV through Indeed. We look forward to hearing from professionals passionate about information security and protecting business systems and data