ABOUT YOU

• A keen eye for detail and a proactive approach to problem-solving
• Strong understanding of cyber security principles and frameworks
• Excellent communication skills and the ability to work collaboratively across teams
• Ability to work independently
• Demonstrable ability to think critically and anticipate threats
• Interest in continuous learning and staying up to date with emerging threats

We have an exciting opportunity for a Cyber Security Analyst to join our established Technology team in a newly created role. As a Cyber Security Analyst, you’ll play a key role in safeguarding our systems and data in a rapidly growing and ambitious accountancy firm.
Key responsibilities will include:

Security Monitoring and Incident Response

• Monitoring security tools for threats and vulnerabilities
• Leading the incident response lifecycle: detection, containment, recovery, and forensic analysis
• Supporting management in coordinating incident resolution

Vulnerability and Endpoint Management

• Identifying and assessing vulnerabilities from risk assessments, penetration tests, and patching activities
• Recommending remediation actions and escalating key risks to the Infrastructure Team
• Enforcing security standards across endpoints, applications, and system builds

Security Audits and Compliance

• Conducting internal audits to ensure alignment with policies and best practices
• Supporting readiness for external audits and accreditations (e.g. Cyber Essentials Plus)
• Assisting with self-assessments against frameworks such as NIST and CIS

Policy and Standards Development

• Recommending improvements to internal security policies, procedures, and controls
• Performing retrospective compliance checks and proposing enhancements

Threat Intelligence and Research

• Staying informed on the evolving threat landscape
• Researching emerging threats and proposing proactive defence strategies
• Sharing insights with management to inform strategic decisions

Security Reporting

• Drafting and delivering relevant security metrics and reports to support visibility and decision-making

Supplier Risk Assessment

• Responding to security-related supplier queries and questionnaires
• Compiling risk reports using publicly available information to support supply chain due diligence