Cyber Security Analyst

We're looking for a Junior Security Analyst to take ownership of how we manage security across our suppliers. You'll build a clear picture of who our suppliers are, what they have access to and when their contracts renew, then make sure each one meets the security standards we need.

It's a varied role that sits between the technical and the commercial side of the business. You'll spend as much time talking to people, internal teams, suppliers and senior leaders, as you will documenting and analysing. It suits someone organised and self-motivated who wants to build a career in cyber security and get real exposure to how a business manages risk.

• Building the supplier register: identifying every supplier the business uses and documenting what they provide, what data and systems they can access, and who owns the relationship internally.
• Tracking renewals: keeping a clear view of contract and renewal dates so security reviews happen before a contract is renewed, not after.
• Assessing supplier security: reviewing each supplier's security position through questionnaires, certifications (e.g. ISO 27001, SOC 2, Cyber Essentials) and evidence, and flagging gaps or risks.
• Deciding what's needed: working out the right level of assurance for each supplier, for example whether a penetration test, further evidence or contract changes are required, and following it through.
• Talking to the business and suppliers: acting as the point of contact for supplier security, explaining requirements clearly to non-technical colleagues and chasing suppliers for information.
• Documenting and reporting: keeping records, trackers and reports up to date (largely in Excel), and presenting findings and risks to senior stakeholders.
• Supporting the wider security team with policies, risk assessments and other projects as the role grows.