Senior IT Security Analyst

At the National Wealth Fund, our mission is to swiftly and effectively mobilise trusted sector insights and investment expertise to unlock billions in private finance for projects across the United Kingdom. Providing £27.8bn of capital and an expanded mandate, we are ready to help the market invest with confidence, continue to drive forward the Government's growth ambitions. We are looking for skilled and results oriented individuals who are motivated to help us build the National Wealth Fund into an industry-leading institution.

Location:

Hybrid working with a minimum of 3 days per week in the Leeds office. Final date to receive applications: 2nd November 2026. Early submission is encouraged, and applications will be reviewed on an ongoing basis.

The Senior IT Security Analyst will play a key role in the delivery and operation of the National Wealth Fund’s Information Security controls, with a current focus on Microsoft identity, access, data protection and compliance tooling, including Microsoft Entra, Role Based Access Control, Microsoft Purview, Data Loss Prevention, and related user and data security controls. Working as part of the Information Security team, and under the direction of the IT Risk & Security Lead, the role will be responsible for the day-to-day management, improvement and operational effectiveness of these controls within the wider security control framework.

The role will support the Head of Information Security and wider stakeholders in maintaining a secure Microsoft-based IT estate, protecting organisational data, and ensuring that security controls remain practical, proportionate and effective. While overall accountability for Information Security controls and cyber risk reduction remains with the Head of Information Security, the Senior IT Security Analyst will have delegated day-to-day responsibility for the effective operation and delivery of assigned security controls, functions and work streams.

This includes identifying control gaps, supporting remediation, responding to incidents, driving agreed deliverables through to completion, and contributing to the team’s shared responsibility for reducing information security risk. The accountabilities and examples set out in this job description are intended to describe the main focus areas of the role rather than an exhaustive list of all activity. As part of a small Information Security team, the post-holder will be expected to contribute to wider priorities and emerging requirements where these fall within the role’s capability and the needs of the function.

• Microsoft Security Tooling:
  Manage and improve Microsoft security, compliance, user and data protection tooling within assigned work streams, contributing to control effectiveness, remediation activity and service improvement where required.
• Microsoft Purview and Data Protection Controls:
  Design, deliver and manage Microsoft Purview, Data Loss Prevention and related information protection controls, supporting data security, governance and compliance across the organisation.
• Identity and Access Management:
  Lead and support identity governance, access control and RBAC activity across the Joiner-Mover-Leaver lifecycle, including access reviews, control checks and improvement activity.
• Risk and Control Assessment:
  Identify security risks, vulnerabilities, control gaps and emerging threats within assigned work streams, supporting proportionate remediation, escalation and risk treatment activity.
• Incident Response:
  Support and coordinate response activity for security incidents where assigned, including investigation, evidence gathering, stakeholder…