Role Overview
Our client is seeking an experienced, hands on Senior Information Security Analyst to support both their technical security work and governance, risk and compliance (GRC). You will assess risks, review supplier and project security, respond to security questionnaires and tenders, support incident investigations, and help maintain compliance with Cyber Essentials Plus, ISO 27001, DSPT and GDPR.
Responsibilities
* Conduct risk assessments for systems, projects and third parties; document findings and remediation.
* Review and respond to supplier/security questionnaires and tender submissions.
* Support vulnerability and patch management; interpret scans and prioritise fixes.
* Advise IT teams on alerts, incidents and security configuration (M365/Azure/Defender/DLP/Conditional Access).
* Maintain risk register and track remediation actions from audits or incidents.
* Support compliance activities (ISO 27001, Cyber Essentials Plus, DSPT) and contribute to policy updates.
* Provide clear security advice to projects and senior stakeholders.
What you'll need to succeed
1. Proven experience in information security, with a blend of technical and GRC responsibilities.
2. Strong understanding of cloud and network security, ideally within Microsoft ecosystems (e.g., Azure, M365, Defender suite, DLP, Conditional Acc...