Graduate Cyber Security Analyst

Job Location:

Woolpit

Additional Location Information:

Salary: £33270

Contract type:
Permanent

Posting End Date: 09/10/2026

At BUUK Infrastructure, our vision is to be the leading utility partner to accelerate the UK towards net zero for all our customers. Our group of companies has been the major drive for change and innovation over 30 years.

We provide a supportive environment that is committed to enabling our people to be the best – ensuring they feel proud to be themselves and part of BUUK Infrastructure.

We are looking for a Graduate Cyber Security Analyst who would like to help us reach our mission to “earn customer loyalty and drive business growth by providing consistently excellent service”.

(The graduate scheme follows a three-stage interview process. Candidates who are successful at the telephone interview stage will be invited to attend an Assessment Centre at our head office in Woolpit, Suffolk on Thursday 3rd December
. Please note that this is currently the only Assessment Centre scheduled).

The Graduate Cyber Security Analyst is an entry-level development role within ICT – Information Security, reporting to the Information Security Manager. The role is designed for a recent graduate who wants to build a career in cyber security, information governance, data protection and/or risk management.

• Assist with vulnerability-management activities across infrastructure, cloud services, applications and end-user devices.
• Support security monitoring, alert triage, investigation and threat-research activities under appropriate supervision.
• Assist with information security incident investigation, evidence gathering, documentation and follow-up actions.
• Support security testing, control validation and remediation activity.
• Help maintain security technologies, procedures, reports, metrics and management information.
• Work collaboratively with project managers, business stakeholders and the PMO to support secure delivery of technology and business change.
• Assist with security reviews of new systems, applications, cloud services and technologies.
• Help document security requirements, actions, risks and decisions throughout project life cycles.
• Support reviews of AI, machine learning and emerging technologies to identify security, privacy, governance and risk considerations.
• Support Data Protection Impact Assessments, privacy reviews and GDPR compliance activities.
• Assist with personal-data breach investigations, information classification and data-handling guidance.
• Support supplier and third-party security and privacy assessments.
• Contribute to data governance and information-management initiatives.
• Support information security risk assessments and gain experience of risk-management methods.
• Assist with risk registers, action tracking, policies, standards, procedures and guidance.
• Assist with evidence gathering and administration supporting ISO 27001, internal governance, regulatory compliance, audits and assurance.
• Support business continuity, disaster recovery, security awareness and governance reporting.
• Complete structured objectives and rotations across security operations, cyber risk, privacy, governance, projects and awareness.
• Work with an assigned manager and experienced colleagues through coaching, mentoring and regular development reviews.
• Undertake formal training and study towards agreed role-relevant certifications.
• Participate in security forums, practical exercises, investigations, projects and continual-improvement initiatives.
• Travel between company locations may be required.
• Standby or out-of-hours support is not initially expected but may be reviewed as capability develops.

• Bachelor's degree in Cyber Security, Computer Science,…