Cyber Security Analyst - (Closing date - 31​/08​/2026

This role is based within the IT Depertment which plays a crucial role in assisting all divisions across the business.

Cyber security is now a continuous business function. This role will help turn the organisation's cyber security investment into measurable risk reduction, stronger resilience and clearer governance.

We are recruiting a Cyber Security Analyst to act as the internal coordinator for cyber security improvement activity, ensuring identified risks, vulnerabilities and recommendations are tracked, owned and driven through to completion. The role is positioned as a graduate or early-career development opportunity for someone with genuine passion for cyber security and the drive to build long-term internal capability.

Bowburn

• Coordinate cyber security improvement activities across the IT function and wider business, helping ensure actions are progressed and evidenced
• Track vulnerabilities, hardening recommendations, cyber insurance actions and security improvement tasks through to completion
• Support ongoing administration, monitoring, reporting and continual improvement across key security platforms
• including Phishing simulation, Email Protection, Patching, Microsoft security tooling and Insider threat tooling
• Assist with Microsoft Secure Score improvements, operating system patching visibility, third-party patching, phishing simulation outcomes and awareness training activity
• Help maintain cyber risk records, action plans, remediation logs, evidence packs and management reporting for IT leadership and relevant stakeholders
• Support cyber incident response preparation, tabletop exercises, simulations and lessons learned activity
• Assist with business continuity planning, disaster recovery validation, recovery testing and resilience improvement work
• Support governance and compliance activity, including Cyber Essentials, ISO 27001 readiness, GDPR-aligned security controls, audit preparation and supplier/partner evidence requests
• Help develop repeatable security processes so cyber improvement activity becomes measurable, consistent and less reactive
• Work with internal teams, external partners and service providers to progress remediation, improve reporting and support future maturity across SOC/MDR, SIEM, 24/7 monitoring and advanced detection options
• The Group is committed to achieving a high standard of Health and Safety in all its activities and the post holder will be expected to contribute to maintaining standards to ensure compliance with all appropriate legislation
• To participate in any identified training or development opportunities
• To recognise the importance of fairness and equality in the workplace, to treat everyone with dignity and respect

It is not possible for this document to define all tasks that may be required of the person. The outlined duties may therefore vary from time to time without materially changing either the character or level of responsibility.

At Esh, our values shape the way we work everyday - and you can expect to see them in action from the moment you join us.

• Care: We prioritise your wellbeing and development, offering a supportive environment where you're encouraged to grow, learn, and bring your best self to work
• Trust: You'll have the autonomy to take ownership of your work, with managers who believe in your abilities and are there to support you when needed
• Integrity: We do the right thing, even when it's not the easiest option. You can rely on open, honest communication and fair decision making
• Respect: We value diverse perspectives and create a workplace where everyone is listened to, valued, and treated with dignity
• Working Together: Collaboration is at the heart of how we operate. You'll join a team that celebrates shared success and supports one another to achieve great results

Together, these values create a workplace where people feel welcome, trusted, appreciated, and proud to be part of the team.

• Cyber Security, Information Security or a related qualification, degree or equivalent practical learning
• Suitable for a capable graduate or early-career candidate looking to develop practical security experience in a supportive internal IT environment
• Desirable: awareness of Microsoft security tooling, endpoint security, vulnerability management, cyber incident response, ISO 27001, Cyber Essentials or business continuity principles
• Desirable: entry-level cyber certifications or willingness to work towards relevant qualifications, such as Microsoft Security fundamentals, CompTIA Security+ or equivalent

• Genuine passion for cyber security and a strong desire to develop technical knowledge and practical experience
• Highly self-motivated, organised and able to manage tasks through to completion
• Shows initiative, ownership and curiosity, with the confidence to follow up actions and challenge where appropriate
• Clear communicator who can work collaboratively with colleagues, suppliers and partners…