Senior IT Security Analyst

Overview

In this role, you will help protect Macmillan’s information, networks, and systems through hands-on security work and risk-aware oversight. You’ll collaborate with technology teams to design, implement, and monitor security controls, and you’ll advise stakeholders on security implications of projects and changes. You’ll monitor threats, respond to incidents, and promote secure development practices across the organisation. This is an opportunity to shape security posture in a mission-driven charity while working with a cross-functional team.

Responsibilities

• Monitor and triage security alerts, tickets, and incidents, escalating when needed
• Design and assure security in projects and technology changes from the outset
• Support network and infrastructure teams with firewall configuration, IDS/IPS, and other controls
• Manage security tooling (SIEM, endpoint protection, PAM, MFA) and keep configurations up-to-date
• Review security configurations and processes to identify improvements
• Collaborate with developers to embed secure development practices throughout the lifecycle
• Support ISO 27001 compliance including evidence gathering and attestation
• Monitor vulnerabilities, threats, and industry trends; propose mitigation
• Coordinate with third parties on security expectations and controls
• Share security knowledge and trends to strengthen organisational posture

Key requirements

• Solid experience in information security across technical and organisational environments
• Experience with information security frameworks and security solutions
• Knowledge of SIEM, vulnerability scanning, and endpoint protection
• Experience with firewalls, IDS/IPS, WAFs, and network security
• Understanding of infrastructure security, patch management, and Windows environments
• Cloud security experience, ideally Azure
• Experience with PAM and multi-factor authentication
• Cryptographic controls and secure development (OWASP)
• Information risk management and GDPR/UK/EU data protection
• Ability to communicate complex security issues to varied audiences

• Calm under pressure
• Structured problem-solving
• Strong stakeholder communication
• SIEM
• Vulnerability management
• Endpoint protection

…