554 Senior Security Analyst jobs in the United Kingdom

Security Analyst | UK Financial Services | Compliance & Technical Security | North West England | 35k-45k + Benefits/Progression

Zachary Daniels are delighted to be working with a well-established UK business during an exciting period of growth, to recruit a Security Analyst . This is a company investing heavily in technology, compliance, and security.

In this role, you'll be part of a collaborative team, working across compliance, risk, and technical security to protect the business, strengthen frameworks, and support transformation projects. It's a varied position offering real scope to grow both your governance and technical skills.

Benefits You'll Enjoy:
Competitive salary up to 45 000 (DOE)
Generous annual leave entitlement, rising with service
Enhanced maternity, paternity, and parental leave
Life assurance
Regular social events

Role Responsibilities:
Identify and assess security risks, ensuring mitigation plans are in place.
Support the development and maintenance of security policies and standards.
Assist with third-party security reviews and supplier risk management.
Provide oversight of vulnerability assessments.
Conduct architecture reviews for new systems and services.
Evaluate technical controls and recommend improvements.
Support the rollout of new security tools and technologies.
Provide input into incident management and security metrics reporting.

About You:
2+ years' experience in an security role.
Strong understanding of risk assessment methodologies.
Knowledge of frameworks such as ISO 27001.
Experience with vulnerability management and technical controls.
Excellent problem-solving skills with strong attention to detail.
Confident communicator with the ability to explain security concepts to non-technical stakeholders.

This is more than just a security role, it's a chance to join a forward-thinking business, develop your expertise across both compliance and technical domains, and make a real impact in protecting and enabling the organisation.

Apply today with your most up-to-date CV!

BBBH34361

Security Analyst | UK Financial Services | Compliance & Technical Security | North West England | £35k-£45k + Benefits/Progression

Zachary Daniels are delighted to be working with a well-established UK business during an exciting period of growth, to recruit a Security Analyst . This is a company investing heavily in technology, compliance, and security.

In this role, you'll be part of a collaborativ.

WHJS1_UKTJ

Information Security Analyst | ISO27001, Rapid7, Protecht | Global Trading Platform

• £60–70k base + 10% bonus
• Hybrid in Coventry with monthly travel to London
• Security certification support & career development built-in

Help shape a high-stakes security program as a hands-on GRC Analyst supporting a global financial institution’s banking expansion. You’ll be central to their mission of scaling a modern InfoSec environment, balancing regulatory rigor, ethical standards and BAU resilience.

You’ll focus on third-party security assessments, metrics reporting, and supporting certification frameworks including ISO27001 and SOC2. Expect close collaboration across risk, technology and compliance stakeholders. All while operating at pace, with visibility and trust from the top down.

What you’ll bring:

• 3+ years in an InfoSec or IT security role within a regulated or financial firm
• Security certifications: SSCP, Security+, or equivalent
• Strong GRC foundation: Able to interpret risk frameworks and speak the language of ISO, SOC2, NIST, etc.
• Comfortable with security tooling and metrics-driven reporting
• Confident communicator: Translate acronyms into action, and engage stakeholders with clarity and purpose
• Ethical mindset: understand when to escalate, when to challenge, and how to own your area

What you’ll be doing:

• ISO27001 & SOC2 governance: day-to-day support of the ISMS, remediation tracking, risk reviews
• Third-party risk assessments: conduct supplier security reviews aligned to appetite and regulatory frameworks
• Security awareness training: drive phishing simulations and curate internal content via Proofpoint
• BAU InfoSec operations: ticket triage, KPI reporting, risk dashboards, vulnerability and patch monitoring
• Compliance tooling: operate and report using platforms like Protecht, Panorays, Rapid7, and Armis
• Banking enablement: key InfoSec input into a major new market launch

Tech & tools you’ll use:

• Protecht – Enterprise risk & audit platform
• Panorays – Third-party risk management
• Rapid7, Armis – Vulnerability & asset visibility
• Proofpoint – Phishing simulations and awareness content
• Microsoft Purview – Data governance and policy enforcement
• Azure (beneficial) – Cloud IAM, logging, and security monitoring

Why this role?

• High-impact GRC project work tied to new market expansion
• Strong internal security culture: backed by a collaborative team and engaged InfoSec leadership
• A clear opportunity to stretch across awareness, compliance, and operational domains

Information Security Analyst | ISO27001, Rapid7, Protecht | Global Trading Platform

• Monitor security alerts and events from various security tools (SIEM, IDS/IPS, firewalls, etc.).
• Investigate security incidents, perform root cause analysis, and recommend appropriate remediation steps.
• Conduct vulnerability assessments and penetration testing to identify and address security weaknesses.
• Develop and implement security policies, standards, and procedures.
• Assist in the management of security technologies, including firewalls, antivirus software, and endpoint detection and response (EDR) solutions.
• Provide security awareness training to employees.
• Stay current with the latest cybersecurity threats, trends, and technologies.
• Collaborate with IT teams to ensure security is integrated into system design and deployment.
• Contribute to the development and maintenance of incident response plans.
• Ensure compliance with relevant data protection regulations (e.g., GDPR).

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Proven experience in information security analysis, threat detection, and incident response.
• Strong understanding of networking protocols, security principles, and common attack vectors.
• Experience with SIEM tools, vulnerability scanners, and other security technologies.
• Relevant certifications such as CompTIA Security+, CISSP, or CEH are a plus.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Ability to work effectively in a hybrid environment, balancing remote and in-office duties.

• Monitor security infrastructure for threats and vulnerabilities using SIEM tools and other security solutions.
• Investigate security incidents, performing forensic analysis and recommending remediation actions.
• Implement and maintain security controls, including firewalls, intrusion detection/prevention systems, and endpoint security solutions.
• Conduct vulnerability assessments and penetration testing.
• Assist in the development and enforcement of information security policies, standards, and procedures.
• Provide security awareness training to employees.
• Stay up-to-date with the latest cybersecurity threats, trends, and technologies.
• Collaborate with IT teams to ensure the security of networks, systems, and applications.
• Participate in security audits and compliance activities.
• Respond to security-related queries and provide technical support.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Proven experience in an information security role.
• Knowledge of security frameworks (e.g., ISO 27001, NIST).
• Experience with SIEM, IDS/IPS, endpoint security, and vulnerability management tools.
• Understanding of networking protocols and security concepts.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal abilities.
• Relevant certifications such as CompTIA Security+, CISSP, or CEH are a plus.

• Monitor security alerts and investigate potential security incidents.
• Respond to and manage security incidents, including containment, eradication, and recovery.
• Conduct vulnerability assessments and penetration tests.
• Analyse security logs and network traffic for suspicious activity.
• Manage and configure security tools, including SIEM, firewalls, and IDS/IPS.
• Develop and update security policies, procedures, and guidelines.
• Perform security awareness training for employees.
• Collaborate with IT teams to ensure secure system configurations.
• Stay up-to-date with the latest cybersecurity threats and trends.

• Bachelor's degree in Information Security, Computer Science, or a related field.
• 2+ years of experience in information security or cybersecurity roles.
• Strong understanding of cybersecurity principles, network security, and common vulnerabilities.
• Experience with SIEM tools, intrusion detection/prevention systems, and firewalls.
• Knowledge of incident response frameworks and procedures.
• Familiarity with vulnerability scanning and penetration testing tools.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Relevant security certifications (e.g., CompTIA Security+, CISSP) are a plus.

• Monitor security systems and logs for suspicious activities and potential security incidents.
• Investigate security alerts, analyse threat intelligence, and respond to security breaches.
• Implement, configure, and manage security tools such as firewalls, IDPS, and EDR solutions.
• Conduct vulnerability assessments, penetration testing, and risk analysis of IT systems.
• Develop, implement, and enforce information security policies, procedures, and standards.
• Assist in the development and delivery of security awareness training for employees.
• Ensure compliance with data protection regulations (e.g., GDPR) and industry standards (e.g., ISO 27001).
• Participate in security incident response planning and execution.
• Collaborate with IT teams to implement security best practices across the infrastructure.
• Stay informed about current cybersecurity threats, vulnerabilities, and mitigation techniques.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 3 years of experience in information security, security operations, or incident response.
• Proficiency in security monitoring tools, SIEM platforms, and vulnerability assessment tools.
• Strong understanding of network security, cybersecurity principles, and threat landscape.
• Relevant security certifications such as CompTIA Security+, CEH, or willingness to obtain.
• Experience with cloud security (AWS, Azure) is a plus.
• Excellent analytical, problem-solving, and investigative skills.
• Strong communication and interpersonal abilities.
• Ability to work effectively both independently and as part of a team.