Senior Security Analyst

Overview

The Information Security Analyst is responsible for embedding pragmatic security assurance into vendor selection, SaaS adoption, and project delivery, ensuring that security risks are identified early, articulated clearly, and actively progressed.

The role operates at the intersection of governance, technical delivery, and operational follow‑through. It provides hands‑on assurance for vendor and SaaS security (including investor‑driven requirements), supports secure delivery of projects, and ensures security commitments translate into real control implementation.

This role is not a policy‑only or compliance‑led position. It is designed for someone who is technically credible, comfortable working with delivery teams, and able to use governance artefacts to support informed decisions.

You will need:

• 5+ years hands‑on experience in Information Security roles spanning technical and assurance responsibilities
  .
• Experience performing vendor, SaaS, or third‑party security assessments.
• Strong understanding of:
  • Cloud and SaaS security concepts
  • Identity and access management
  • Secrets management and key rotation
  • Vulnerability management processes
• Ability to engage credibly with engineers and delivery teams, translating security expectations into practical outcomes.
• Clear written and verbal communication skills, particularly for risk articulation and decision support.