Cyber Security Analyst

Overview

In this role, you protect Carter Jonas’ systems, data and information assets through hands-on security operations, vulnerability management, incident response, and governance. You will work with IT, Compliance, HR and suppliers to monitor threats and strengthen the security posture. The position fits within the IT team in Peterborough and supports ongoing assurance, security culture and continuous improvement. You’ll engage in cross-functional security work, delivery of clear security reporting, and driving risk-conscious practices across the business. This is a chance to shape how security enables business growth within a collaborative, inclusive team.

Pay / Benefits

• highly competitive salary and benefits package
• flexible benefits to suit individual needs
• option to purchase additional annual leave
• health cash plans
• cycle-to-work scheme
• flexible and agile working arrangements

Responsibilities

• Monitor security alerts, logs and events across SIEM, EDR/XDR, Microsoft Defender, Microsoft Sentinel, email security, cloud security and network monitoring tools
• Support timely incident response, containment, remediation, recovery and post-incident reviews with internal teams and third-party providers
• Maintain the vulnerability management programme, including scanning, prioritisation, remediation tracking, exceptions and reporting
• Support ISMS, ISO 27001, Cyber Essentials Plus, PCI DSS and related security governance, risk and compliance activity
• Maintain security risk, non-conformance, improvement and information asset records, escalating material risks or decisions as required
• Support audits, supplier assurance, project security reviews, access governance, data protection activity and business continuity testing
• Produce clear security reports, metrics and updates for operational, management and governance forums, and support awareness activity across the business

Key requirements

• experience in cyber security or a related technical field
• strong understanding of networks, cloud platforms, identity services, and security technologies
• experience supporting incident response, vulnerability management, risk and compliance activities, and security operations
• experience with Microsoft security solutions such as Defender, Sentinel, Purview, Entra, and Azure is desirable
• knowledge of security awareness training, phishing simulations, supplier assurance, and security reporting would be advantageous

• cross-functional collaboration
• clear communication
• attention to detail
• SIEM
• EDR/XDR
• Microsoft Defender

…