IT Systems & Security Engineer - London; Westminster

The Centre for Information Resilience (CIR) is an independent organisation dedicated to exposing human rights violations, disinformation and harms against women and minorities. We achieve this through open source research, digital investigations, capacity-building with local partners, and collaboration with media to amplify our impact.

CIR was born out of a determination to expose those spreading harm - online and offline - around the world, particularly in areas of violent conflict, such as Afghanistan, Myanmar, Sudan and Ukraine. Our projects are at the forefront of efforts to investigate and document human rights abuses, war crimes, and harms against women and minorities. We work closely with multilateral and national justice accountability bodies.

Contract Type:
Employee, permanent role. We are unable to sponsor visas for this role.

Start date:

ASAP

Closing date: 14th October 2026 at 23:55pm

Contract length:
Permanent, full time

Location:

Westminster, London-based. You will need to visit the London office 1-2 days per week, with the ability to come in at short notice when operational issues require onsite attention.

Clearance:
Please note that this role requires UK Security Check (SC) clearance. Please indicate on the application question whether you currently hold SC clearance or are eligible to obtain it. (see: SC - Guidance Pack for Applicants - )

CIR is looking for an experienced IT Systems and Security Analyst. The right candidate will be experienced in a broad range of IT systems and security support and maintenance, ideally in an small or medium-sized enterprise (SME) type environment where organisational scaling and constant change is normal. They will be looking for a permanent hands-on technical role, where they can support a wide variety of systems and users, taking ownership of systems, procedures and documentation.

They will be a creative thinker who will be constantly looking for new ways to innovate and improve on how IT systems deliver organisational requirements, with security at the core of everything they deliver.

• Support, monitor, maintain and refine IT systems and security service delivery across SaaS and IaaS platforms, including AzureAD, M365, and AWS.
• Support and maintain a diverse hardware and OS ecosystem (Windows, MacOS, Linux, iOS, Android).
• Execute day-to-day IT operational tasks, ranging from complex technical support to routine account provisioning, device provisioning and support, patch management and vulnerability remediation.
• Be an internal expert and point of contact to coordinate with and respond to alerts and threats identified by a SOC/MDR partner to safeguard data, systems and people.
• Support internal audit processes and compliance baselines (e.g., Cyber Essentials), identifying gaps and contributing to security risk management processes.
• Constructively question existing systems and security workflows, technologies, and delivery methods to propose actionable operational improvements.
• Use technical skill and creative thinking to support and help evolve operational security delivery across investigation activities in a highly challenging, diverse and constantly evolving environment.

• Cloud & Identity Administration:
  Practical experience with Azure/AzureAD and SSO integrations, M365, AWS for an SME.
• SaaS application administration:
  Proven experience in implementing, supporting and maintaining a wide range of SaaS applications that deliver a variety of functionality across a SME environment.
• Productivity and collaboration: A strong background in support and usage of key productivity and collaboration tools, such as Office 365, Teams, Slack etc.
• Multi-Platform OS Knowledge:
  Hands-on experience supporting and troubleshooting Windows, Mac, Linux, and mobile OS environments.
• Security & Audit:
  Practical understanding of security risk management frameworks and audit standards like Cyber Essentials and how to maintain appropriate technical controls to gain/retain certification in an SME environment. Relevant certifications (CompTIA Security+, CISSP) are advantageous but not essential.
• AI Awareness:
  Pragmatic understanding of modern AI tools, including operational opportunities and security risks.
• Clearance:
  Active UK SC Clearance, or full eligibility to undergo SC vetting.

• Excellent Attention to Detail:
  Meticulous approach to consistent IT service delivery, security compliance, access management, and documentation…