ABOUT YOU

We’re looking for someone who combines technical knowledge with an investigative mindset and strong stakeholder communication skills.

Essential skills & experience:

• Experience working in security operations, SOC, or incident response.
• Knowledge of SIEM tools, vulnerability management, and log analysis.
• Understanding of security frameworks such as ISO 27001, NIST, or PCI DSS.
• Strong communication skills to engage with IT teams, business stakeholders, and non-technical staff.
• Ability to work independently at Heron Foods while remaining aligned to Group Information Security.

Desirable:

• Hands-on exposure to security tooling (e.g., EDR, SIEM, vulnerability scanners).
• Experience supporting audits and compliance activities.
• Scripting/automation skills (e.g., PowerShell, Python) to streamline tasks.

ABOUT THE ROLE

We are looking for an Information Security Analyst to join the Group Information Security Function at B&M, with a dedicated focus on Heron Foods.
In this role, you’ll act as the primary contact for all things cyber and information security at Heron Foods, working day-to-day under the steer of the Head of IT at Heron Foods while aligning with the security strategy, policies, and standards set by the Group Head of Information Security.
This is an exciting opportunity to be at the frontline of cyber defence — monitoring threats, responding to incidents, managing vulnerabilities, and embedding security into everyday operations across Heron Foods.

KEY RESPONSIBILITIES

As Information Security Analyst, you will:

• Be the first point of contact for all cyber and information security matters within Heron Foods.
• Monitor and respond to alerts from our Managed Security Operations Centre (SOC).
• Coordinate incident response, containment, and recovery activities.
• Oversee vulnerability management: assessing risks, tracking remediation, and validating fixes.
• Support forensic investigations and evidence handling when needed.
• Contribute to compliance activities including PCI DSS evidence gathering and audit readiness.
• Deliver security awareness training, phishing simulations, and staff engagement campaigns.
• Provide local insights to the Group Information Security team to strengthen overall resilience.

At B&M and Heron Foods, we are on a journey to strengthen our cyber resilience. This role offers:

• A unique opportunity to be the dedicated security lead for Heron Foods while benefiting from Group-level support and expertise.
• A competitive salary of £35,000 – £45,000 (depending on experience).
• Hybrid working arrangements.
• Excellent staff discount across B&M and Heron Foods stores.
• Opportunities for training, development, and progression within a growing security function