Information Security Analyst

At Keolis Amey Docklands (KAD), we operate and maintain the Docklands Light Railway, keeping London moving safely and efficiently. Technology and data are critical to our operation - and protecting them is non‑negotiable. Our Information Security team plays a vital role in safeguarding our systems, supporting compliance, and ensuring resilience across the business.

We are looking for an Information Security Analyst to support the delivery of our cyber security strategy and protect the organisation from evolving threats. Reporting to the Information Security Manager, you will play a key role in monitoring threats, responding to incidents, and strengthening our security posture across both IT and operational environments. This is an excellent opportunity for a security professional who enjoys hands‑on technical work, cross‑functional collaboration, and continuous improvement
.

• Support the development and implementation of information security policies, procedures and standards
• Monitor security tools (SIEM, endpoint protection, etc.) and investigate security alerts and incidents
• Conduct security assessments, audits, and risk analyses to identify vulnerabilities
• Collaborate with IT and business teams to implement effective security controls
• Assist in incident response activities (containment, eradication, recovery)
• Contribute to disaster recovery and business continuity planning
• Deliver security awareness training to promote a strong security culture
• Support internal/external audits, penetration testing, and compliance reviews
• Maintain accurate security documentation, risk registers and treatment plans
• Work with third‑party suppliers to assess and manage security risks
• Stay up to date with emerging threats and recommend improvements

• Experience in an Information Security / Cyber Security role
• Relevant certification such as CISSP, CISM, CompTIA Security+ or CEH
• Knowledge of security frameworks (e.g.
  ISO 27001, NIST, CIS Controls
  )
• Understanding of network security principles and technologies
• Experience with tools such as SIEM, IDS/IPS, firewalls, endpoint protection
• Experience conducting security assessments and risk analysis
• Strong analytical and problem‑solving skills
• Ability to manage and respond to security incidents
• Excellent communication skills, with the ability to explain technical concepts clearly

• Experience in a regulated or critical infrastructure environment
• Familiarity with GDPR and data protection regulations
• Exposure to penetration testing and vulnerability management tools

• Opportunity to work in a critical transport infrastructure environment
• Exposure to enterprise‑level security operations and frameworks
• Collaborative working across KAD, TfL, Keolis and Amey
• Ongoing professional development and certification support
• A role with real impact - helping protect systems supporting millions of journeys

We are committed to building a diverse workforce and particularly encourage applications from underrepresented groups, including women, early‑career talent (under 25) and individuals from ethnically diverse backgrounds. If you are successful and offered the role, you will be required to undergo a Baseline Personnel Security Standard (BPSS) which must be deemed satisfactory by the company. This will include a Disclosure and Barring Service (DBS) check, verification of your home address, employment reference checks covering the last three years and your right to work in the UK.