Security Analyst

We sell the world’s best chicken. Seriously. And we’ve done it since 1939, when the idea of crispy, original recipe chicken took Kentucky by storm. Now, we’re proud to serve 1000+ communities across the UK and Ireland, bringing the grit, pride and iconic reputation that we started with, all those years ago.

Across the Restaurant Support Centre (RSC), we come to work to be ourselves, and to make something of ourselves. We want to see our potential go that little bit further, as part of one of the world’s most iconic brands.

What’s the gig? Well, you support our restaurants — and we’ll support you every step of the way. Simple. Our doors are open — and they can take you anywhere.

All we ask is that you be you. Because that makes us, us. Sound good?
Great. Let’s find out about that job.

The Security Analyst is responsible for safeguarding the organization’s systems, data, and services through risk-based analysis, proactive security operations, and continuous improvement of controls.

This mid-level role blends hands‑on technical work (e.g., vulnerability management, endpoint/EDR, SIEM monitoring) with risk reporting, mitigation planning, and compliance alignment (e.g., ISO 27001, NIST CSF, CIS Controls, GDPR). The successful candidate will be self‑motivated, detail‑oriented, and adept at prioritizing workload based on quantified risk and business impact.

We don’t hire staff — we hire people. People with real lives and aspirations, building real careers. Each of us has something special to add to the mix we call work, and we’ll always encourage you to add your perspective.

See, at KFC, everyone’s welcome — whatever your background, and whatever future you’re creating. We’ll look out for you because you’re one of us, not because you work for us. We’ll invest in your potential, because it’s what we’ve always done. But most of all, we’ll give you the freedom to be you, wherever
(and whoever) you happen to be.

We offer benefits that make your life that little bit easier, because we know the juggle is real.

From flexible, hybrid working and Live Well Days, we’ve created a package that supports the real you, in and out of work.

You'll get:

• Hybrid working from our Woking RSC (just 24 mins from London)
• Up to 11% company pension contributions
• 25 days’ holiday (plus bank hols)
• 5 Live Well Days a year, just for you
• Bonus scheme linked to company & personal performance
• Private healthcare, Digital GP access & mental health coaching
• Enhanced parental leave and flexible return options
• Study support, income protection, life cover & more
• And yes — 25% off the chicken

Because real ones deserve real rewards.

WHAT WE LOVE FROM YOU:

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent practical experience).
• Relevant certifications (one or more strongly preferred):
  CompTIA Security+, CySA+, SSCP, GIAC (e.g., GSEC/GCIH), AZ-500, MS-500, CCSK/CCSP, ISO 27001.

• Solid experience in a security analyst or similar role within IT security operations.
• Hands‑on experience with vulnerability management (scanning, analysis, and remediation coordination).
• Practical experience with endpoint security/EDR and SIEM alert triage and incident remediation.
• Demonstrated ability to produce risk reports and drive risk mitigation actions with cross-functional teams.
• Exposure to incident response and security testing (e.g., assisting with pen tests, red team findings, or threat modeling).
• Familiarity with industry standards controls and regulations (e.g., NIST, CIS, GDPR, HIPAA).
• Familiarity with Directory Services (Active Directory and Entra ) with emphasis on security.
• Good communication skills and the ability to collaborate effectively with diverse teams.

• Risk & Compliance: Solid understanding of risk assessment methodologies, control frameworks (ISO 27001, NIST CSF, CIS Controls), and regulatory basics (GDPR; PCI DSS).
• Security Controls: Network, endpoint, identity, data protection, secure configuration, and logging/monitoring fundamentals.
• Cloud & Modern IT: Working knowledge of security in Microsoft 365, Azure…