Cybersecurity analyst jobs in SaleCreate job alerts

Headquarters: Remote Manchester, UK BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cybersecurity SaaS portfolio. Our culture of flexibility, trust, and continual learning means you will be recognized for your growth, and for the impact you make on our success. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself. BeyondTrust is a global leader in privileged access management. Our products provide remote access and privileged control capabilities that are deployed across thousands of enterprise environments worldwide. That makes us a high-value target. Nation-state actors, ransomware operators, and sophisticated threat groups actively target companies like ours—not just to compromise our corporate environment, but to reach the customers who trust our software to protect their most sensitive systems. A compromise of BeyondTrust is a compromise of the privileged access layer inside our customers’ networks. We take that responsibility seriously. As a Cyber Defense Engineer on our Cyber Defense Operations team, you will serve as a front-line defender responsible for protecting both BeyondTrust’s enterprise infrastructure and the integrity of the products our customers depend on. You will monitor, investigate, and respond to security events in an environment where the stakes are real and the adversaries are capable. You will work alongside experienced threat hunters, incident responders, and detection engineers in a collaborative team that values sharp analytical thinking over checkbox compliance. This team is building toward an AI-augmented operating model. You will be expected to use AI-driven tools in your daily work and to contribute to how we integrate these capabilities into our detection, triage, and response workflows. We are not looking for people who are waiting to be told what to do—we are looking for people who want to build something. • Monitor and triage security alerts across SIEM, EDR, and CSPM platforms covering both corporate and product environments., • Investigate alerts to determine scope, severity, and whether escalation is warranted., • Leverage AI-assisted triage and enrichment tools to accelerate analysis and reduce mean time to detect., • Classify, document, and track alerts through the full lifecycle using ticketing and case management systems., • Participate in or lead incident response engagements from detection through remediation, including evidence collection, forensic analysis, root cause determination, and stakeholder communication., • Conduct investigations across SIEM, EDR, CSPM, and cloud-native log sources including identity provider logs, cloud audit trails, and network flow data—spanning both corporate and product infrastructure., • Execute established IR runbooks across identity, endpoint, cloud, and email investigation workflows., • Manage or assist with evidence handling, forensic artifact collection, and chain-of-custody procedures., • Produce clear, decision-ready incident summaries and post-incident reports for both technical and leadership audiences., • Contribute to the design, implementation, and tuning of detection rules across SIEM and EDR platforms, with a focus on reducing false positives and closing coverage gaps., • Translate threat intelligence (CVE advisories, CISA alerts, vendor bulletins, open-source feeds) into actionable detection content, with particular attention to threats targeting privileged access tooling and supply chain attack vectors., • Help maintain and evolve detection coverage mapped to MITRE ATT&CK., • Partner with threat hunting peers to validate detection logic through hypothesis-driven hunts., • Use AI-driven tools for alert triage, enrichment, and investigation as a standard part of daily operations., • Contribute to the evaluation, integration, and optimization of AI and automation capabilities across the team’s workflows., • Assist in designing prompts, agent workflows, or LLM-based pipelines that augment analyst capabilities and reduce manual effort., • Partner with engineering teams to improve log ingestion, data quality, and tool integrations., • Maintain daily operational notes and shift handoff documentation., • Contribute to and refine IR runbooks, playbooks, and standard operating procedures., • Participate in on-call rotation for after-hours incident escalation., • Track and report on operational metrics (MTTD, MTTR, MTTC, false positive rate) and identify improvement opportunities., • Participate in tabletop exercises, purple team activities, and post-incident reviews., • 4+ years of experience in a SOC, security operations, or incident response role., • Understanding of common attack frameworks (MITRE ATT&CK), network protocols, and endpoint behavior., • Experience with at least one SIEM platform and familiarity with writing search or detection queries., • Familiarity with EDR platforms and cloud environments (IaaS preferred)., • Comfort using AI systems (e.g., LLM-based assistants, copilots, or AI-driven analysis tools) as part of security workflows., • Strong written communication skills; able to document findings clearly and concisely for both technical and non-technical audiences., • Experience leading or co-leading complex incident response engagements from triage through remediation., • Experience with identity and access management platforms and cloud security posture management tools., • Scripting and automation skills (Python, PowerShell, or equivalent) applied to security workflows., • Familiarity with SOAR platforms or orchestration tools for automated response and enrichment., • Experience designing or implementing AI agent architectures, LLM-based automation pipelines, or prompt engineering for security use cases., • Experience building or contributing to threat intelligence programs or detection-as-code pipelines., • Understanding of the privileged access management landscape and the threat actors that target it., • Track record of evaluating and adopting emerging technologies in a production security environment., • Competitive salary and pension with up to a 10% annual bonus, • 25 days’ holiday which increases with length of service, • Competitive pension scheme, • Three weeks’ additional leave at seven years’ service, • Fully remote in the UK with up to 4 weeks per year under our Working Abroad policy (subject to approval), • Bupa Private Healthcare for you and family, • Medicash Benefit (including opticians and dental cover), • Life insurance at 4x salary and income protection, • Paid parental leave and enhanced maternity leave, • Employee Assistance Programme, • Opportunity to co-invest and become a BeyondTrust shareholder, • Investment in AI skills, with Claude Code and Copilot centres of excellence, • Pluralsight and LinkedIn Learning licenses Diversity. Inclusion. They’re more than just words for us. They are the guiding values of how we build our teams, cultivate leaders, and create a culture where people feel connected. We take care of our employees so they can take care of our customers. Customers who come from all walks of life just like us. We hire incredible people from diverse backgrounds because when we are different together, we are stronger together. BeyondTrust is the global identity security leader protecting Paths to Privilege™. Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders. BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies. We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners. Learn more at www.beyondtrust.com. #LI-DF1 #J-18808-Ljbffr

About the job you’re consideringCyber threats are evolving fast—and so are we. As part of our 24/7 Protective Monitoring team, you’ll be on the front lines defending critical systems and sensitive data for both government and commercial clients across the UK and Europe. You won’t just be watching alerts—you’ll be actively shaping the security posture of organizations that matter.This is your chance to build real-world experience with cutting-edge tools like SIEM and security automation platforms, all while working in a collaborative, mission-driven environment.If you are successfully offered this position, you will go through a series of pre-employment checks, including identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service)This role is 5 days onsite in Preston and is on shift.Your role:As a Security Incident Management Analyst, your mission is to detect, investigate, and escalate potential threats. You’ll:Monitor security systems for suspicious activity and emerging threats.Log and escalate incidents using our incident management platform.Ensure the health and performance of monitoring tools.Collaborate with other analysts and support teams during investigations.Document findings clearly and contribute to continuous improvement.Help produce regular service reports and insights.You can bring your whole self to work. At Capgemini building an inclusive future is part of everyday life and will be part of your working reality. We have built a representative and welcoming environment, for everyone.Your skills and experienceA background in IT or cybersecurity (or a strong desire to grow in this field).Analytical thinking and a problem-solving mindset.Familiarity with incident, problem, or change management.Understanding of security principles and best practices.Strong communication and multitasking skills.Nice-to-Have Skills:Experience with SIEM tools (e.g., QRadar, Splunk, Microsoft Sentinel).Knowledge of TCP/IP and common cyber threats (phishing, malware, DDoS).Certifications like CompTIA Security+, Splunk certified user, Microsoft SC900 & SC200.Exposure to services like vulnerability management, PKI, anti-malware, and forensic analysis.We are a Disability Confident EmployerCapgemini is proud to be a Disability Confident Employer (Level 2) under the UK Government’s Disability Confident scheme. As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who:Declare they have a disability, andMeet the minimum essential criteria for the role.Please opt in during the application process.Your security clearance and pre-employment checksIf you are successfully offered this position, you will go through a series of pre-employment checks, including: identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service)Some roles will also require an additional level of security clearance:Security Check (SC) Clearance:To be successfully appointed to this role, it is a requirement to obtain Security Check (SC) clearance.To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements.Throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality.Some posts are restricted to sole UK Nationals for security reasons; therefore, you may be asked about your citizenship in the application process.Make it real – what does it mean for you?Flexibility to work your wayYou will be encouraged to have a positive work-life balance. Our hybrid-first way of working means we embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people. All UK employees are eligible to request flexible working arrangements.Your wellbeingYou’d be joining an accredited Great Place to work for Wellbeing in 2024. Employee wellbeing is vitally important to us as an organisation. We see a healthy and happy workforce a critical component for us to achieve our organisational ambitions.To help support wellbeing we have trained ‘Mental Health Champions’ across each of our business areas, and we have invested in wellbeing apps such as Thrive and Peppy.Shape your pathYou will be empowered to explore, innovate, and progress. You will benefit from Capgemini’s ‘learning for life’ mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard ManageMentor, Cybersecurity qualifications and much more.Shared energyYou’ll be bringing your unique skills and perspectives to the team, inspiring and taking inspiration from your teammates as you unlock value in everything you do. You’ll be joining a professional community of experts, who have got your back and will support you, every step of the way.Why should you consider Capgemini?Growing clients’ businesses while building a more sustainable, more inclusive future is a tough ask. When you join Capgemini, you’ll join a thriving company and become part of a collective of free-thinkers, entrepreneurs and industry experts. We find new ways technology can help us reimagine what’s possible. It’s why, together, we seek out opportunities that will transform the world’s leading businesses, and it’s how you’ll gain the experiences and connections you need to shape your future. By learning from each other every day, sharing knowledge, and always pushing yourself to do better, you’ll build the skills you want. You’ll use your skills to help our clients leverage technology to innovate and grow their business. So, it might not always be easy, but making the world a better place rarely is.About CapgeminiCapgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organisations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of over 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2025 global revenues of €22.5 billion. Make it real | www.capgemini.com #J-18808-Ljbffr

Department: Cyber Services and Capabilities Location: GBR Manchester Hardman Boulevard Description Today, it is an unavoidable fact that your business-critical infrastructure and systems are at risk of attack. The key to good security is a clear understanding of what is most critical to the business. When you do not have enough internal resources, time, or skills to monitor and manage your IT environment 24/7, NCC Group can help, freeing up your skilled employees to focus on value-add activities. NCC Group provides a range of managed and hosted services delivered from our Global Security Operations Centre (SOC), which operates 24/7, 365 days a year. Our team of over 100 accredited security experts is available around the clock, dealing daily with over 200 million log events and providing support for thousands of network devices. NCC Group’s MXDR Team provides world-class Extended Detection and Response (XDR) services, detecting, responding to, and mitigating cyber-attacks on our customers' networks in our Security Operations Centres. We use a plethora of detection tools such as the Microsoft Security Stack, Splunk, EDR, IDS & IPS tools, and many more, all integrated with NCC Group's Unified Cyber Platform (UCP). The MXDR Team is looking for L2 SOC Analysts with a passion for security to join the team, helping customers get the most out of our services and protect their networks. This is an opportunity to join a technically advanced and talented team and help NCC Group build and deliver world-class services to our customers. This role is ideal for a seasoned SOC Analyst with experience in cybersecurity looking to broaden their scope of cyber skills with a strong focus on detection and response to cyber incidents. • Monitor global systems for potential threats, vulnerabilities, and indicators of compromise., • Perform in-depth analysis of security alerts utilising both NCC Group's UCP and explore further using the underlying detection platform where necessary., • Provide incident remediation and prevention documentation and recommendations to customers based on defined procedures and analyst experience., • Document and adhere to processes related to security monitoring procedures., • Provide customer service that always exceeds our customers’ expectations., • Initiate escalation procedures to counteract potential threats, vulnerabilities, and threat actors., • Compile and review service-focused reports., • Act as an escalation point for junior team members, aiding and mentoring where necessary., • Contribute to the continuous improvement of SOC procedures and documentation., • Perform other SOC duties as assigned., • Practical experience with security and networking tools such as Microsoft XDR (Sentinel, Defender) and Splunk Enterprise/Cloud/Enterprise Security, • Strong understanding of network protocols, endpoint detection, and digital forensics, • In-depth knowledge of Windows and Linux operating systems, • Hands-on experience analysing common security incidents and supporting endpoint security, • Ability to remain calm and effective during high-pressure and sensitive security situations, • Microsoft: SC-200, AZ-500, AZ-900, MS-500, • Splunk: Certified User, Power User, Advanced Power User, Enterprise Security Administrator, • CrowdStrike: CCFR, CCFH, • CREST: CPSA, CRIA, CMRE, CNIA, CHIA, • CompTIA: Security+, Network+, CySA+, • Cisco: CCNA, • SANS: GCIA, GCIH, GSEC, • Other relevant certifications, • Flexible Working: Balance your work and personal life with our flexible working options., • Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave differs for SOC shift workers, please speak to your TA partner for more information)., • Medicash & Critical Illness Scheme, • Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme., • Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities., • Green Car Scheme: Drive green and save money with our eco-friendly car scheme., • Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme., • Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet., • Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments. We review every application received and will get in touch if your skills and experience match what we’re looking for. If you don’t hear back from us within 10 days, please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles. To ensure a fair and consistent assessment process, candidates must not use AI tools to generate, suggest, coach or provide responses during live or recorded interviews unless this has been approved in advance, by the hiring team. For more information please read our AI in Hiring - Candidate Policy. If you do not want us to retain your details, you can utilise the Manage Your Data tool provided by Pinpoint or contact us directly at: . All personal data is held in accordance with the NCC Group Privacy Notice. We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage. Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process. #J-18808-Ljbffr

• The Security Architect is a senior technical leadership role responsible for defining, governing and evolving secure enterprise architectures across Advania’s Managed Services client base, • The role provides strategic and technical leadership across identity, security, cloud, infrastructure, networking, data protection and operational security domains, with a particular focus on Microsoft technologies including Entra ID, Defender, Sentinel, Purview, Azure and Microsoft 365, • Security Architecture Leadership, • Act as the lead security architecture authority across assigned Managed Services clients, • Develop enterprise security strategies, roadmaps and target-state architectures, • Produce and govern High-Level Designs (HLDs), Low-Level Designs (LLDs) and reference architectures, • Ensure architectures align with Zero Trust, Security by Design and Secure by Default principles, • Conduct architecture reviews and design assurance activities, • Identity & Access Management Architecture, • Design and govern enterprise identity strategies across cloud, hybrid and on-premises environments, • Lead architecture for:, • Microsoft Entra ID, • Active Directory, • Identity Governance, • Privileged Identity Management (PIM), • Conditional Access, • Authentication Services, • Federation, • Single Sign-On, • B2B/B2C identity models, • Define lifecycle management and access governance strategies, • Architect integrations between Microsoft identity services and third-party platforms. Managed Identities, Conditional Access, Identity Governance, Enterprise Applications and hybrid identity capabilities are core areas already recognised within Advania’s service offerings, • Microsoft Security Architecture, • Provide architectural ownership across the Microsoft security ecosystem, including:, • Microsoft Defender Suite, • Microsoft Sentinel, • Microsoft Purview, • Security Copilot, • Microsoft Intune, • Entra ID Security, • Azure Security Services, • Microsoft 365 Security & Compliance, • Develop security patterns and reference architectures for:, • Threat protection, • Identity protection, • Data protection, • Insider risk management, • Security monitoring, • Compliance, • AI security, • These technologies are explicitly identified as core security architecture domains within Advania’s security architecture practice, • Infrastructure & Platform Integration, • Design secure architectures spanning:, • Azure, • AWS, • Google Cloud, • On-premises infrastructure, • SaaS platforms, • Datacentre environments, • Lead secure integration of:, • Third-party security products, • Network infrastructure, • Business applications, • Identity providers, • Security operations tooling, • Assess technical dependencies and integration risks across complex customer estates, • Managed Services Enablement, • Support the onboarding of customer environments into managed services, • Ensure new solutions are operationally supportable, • Define service acceptance criteria and operational design requirements, • Work alongside SOC, Managed Identity, Azure and Infrastructure teams to establish support models, • Provide technical governance throughout the service lifecycle, • Client Advisory & Strategic Engagement, • Act as trusted advisor to CIO, CTO, CISO and technology leadership teams, • Facilitate architecture workshops and strategy sessions, • Develop security strategies, maturity roadmaps and investment plans, • Present architecture solutions and recommendations to executive and board-level stakeholders, • Support client security assessments, audits and transformation programmes, • Service Development, • Support the creation and evolution of Managed Security Services, • Define architecture standards, reusable patterns and technical frameworks, • Evaluate emerging technologies and services, • Drive innovation across identity, cloud security, AI security and automation, • What Success Looks Like, • Structural review of 10 clients, understand posture, contract, roadmaps and major risks, • Develop reusable patterns covering Entra ID, Purview, and Defender for Cloud, • Support at least 5 qualified opportunities, • Trusted architecture authority across assigned clients, • Infrastructure Integration, • Cloud based PKI, • Executive stakeholder management, • Microsoft Sentinel, • AZ-305 Azure Solutions Architect, • GDPR Risk Management, • Microsoft Entra ID, • Multi-cloud security architecture, • Client Engagement, • PIM SC-100 Cybersecurity Architect Expert, • MFA, • Minimum 3-5 years’ experience in enterprise security, cloud architecture or cyber security roles, • Strong understanding of: Increased adoption of Microsoft security technologies AI security and governance Networking DORA Deep expertise in: Threat Modelling Security Engineering Identity Governance Microsoft Intune Cloud Security Reusable architecture standards and patterns established across the business Directory Services Regulatory environments including: Positive client satisfaction and stakeholder feedback SSO Infrastructure Cyber Essentials Microsoft Federation Managed Services environment Microsoft Defender Suite Growth of architecture-led consultancy and managed service opportunities Extensive client-facing consultancy experience Azure Security Success Measures Architecture workshop facilitation Identity & Access Management Authentication Security architectures successfully deployed into operational managed services ISO 27001 Security Governance Azure Landing Zones SC-200 Security Operations Analyst Hybrid Identity Advanced experience across: Microsoft Purview Desirable Experience Exposure Management and Vulnerability Management platforms API Security NIST CSF Secure DevOps / DevSecOps Security Operations integration Microsoft 365 Security & Compliance FCA / PRA Security Monitoring Improved client security maturity and resilience Microsoft Expertise AZ-500 Azure Security Engineer SC-300 Identity & Access Administrator Secure Architecture Frameworks Demonstrable experience operating as a Security Architect, Enterprise Architect or Principal Consultant Technical leadership across multiple concurrent clients NIS2 Data Protection Hybrid Infrastructure Zero Trust Architecture CISSP Certifications CCSP CISMS ABSA Practitioner #J-18808-Ljbffr

This job is with Fitch Group, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Analyst, Information Security GRC Location: Manchester, UK | Work Arrangement: Hybrid | Department: Information Security About the Role Fitch is seeking an Information Security GRC Analyst to support the delivery and ongoing development of its Cyber Security Awareness and Education program. This role helps employees understand cyber risks and build secure working habits through engaging communications, training, phishing simulation activities, campaigns, reporting, and program administration. This is an excellent opportunity for someone early in their cyber security, communications, learning and development, risk management, or employee engagement career who is interested in the human side of cyber security. The successful candidate will work closely with Information Security, Employee Communications, Learning and Development, Technology, HR, and business stakeholders to make security guidance clear, practical, and relevant for employees across a global organization. Responsibilities: Support the planning, coordination, and delivery of cyber security awareness campaigns, including Cyber Security Awareness Month and targeted awareness initiatives throughout the year. Support awareness communications such as newsletters, articles, email campaigns, intranet posts, manager updates, event invitations, and reminder messages. Translate technical cyber security topics into clear, accessible, and employee-friendly messaging. Support the security awareness training lifecycle, including content updates, testing, launch coordination, completion tracking, reminders, and evidence retention. Assist with targeted, role-based, regional, and regulatory training activities, including stakeholder reviews, approvals, and supporting documentation. Support phishing simulation campaigns, including preparation, testing, audience coordination, communications, reporting, and post-campaign follow-up. Compile and maintain program metrics, including training completion, campaign engagement, phishing simulation outcomes, reporting rates, and communication performance. Support the preparation of dashboards, leadership updates, meeting materials, and program reports. Maintain organized records of approvals, communications, process documentation, evidence, and supporting materials. Coordinate with stakeholders across Information Security, Technology, Communications, HR, Learning and Development, Facilities, and business teams. Assist with virtual and in-person awareness events, including speaker coordination, event briefs, calendar invites, promotional materials, volunteer coordination, and post-event follow-up. Qualifications: Experience in cyber security awareness, human risk, training, communications, and employee education. Strong written communication skills, with the ability to make complex topics clear, simple, and engaging. Good attention to detail and the ability to manage multiple tasks, deadlines, and stakeholders. Strong organizational skills and confidence maintaining trackers, documentation, and structured records. Ability to work collaboratively with technical and non-technical colleagues across different teams and regions. Comfortable using Microsoft Office tools, including Word, PowerPoint, Excel, Outlook, Teams, and SharePoint. Willingness to learn about phishing, social engineering, data protection, identity and access management, secure working practices, AI-related risks, and emerging cyber threats. Ability to handle sensitive information responsibly and maintain confidentiality. A proactive, curious, and improvement-focused mindset. Preferred Experience: Experience with cyber security awareness programs, phishing simulations, security training platforms, employee engagement campaigns. Experience drafting internal communications, newsletters, articles, presentations, training materials. Experience coordinating campaigns, events, workshops, stakeholder reviews, approval processes. Familiarity with reporting metrics and dashboards. Basic understanding of cyber security topics such as password security, multi-factor authentication, data handling, AI-related risks, and incident management. Experience working in a regulated, financial services, professional services, or global corporate environment. What We Offer: You will have the opportunity to contribute to a global cyber security awareness program, work with stakeholders across the business, and develop practical experience in cyber security, communications, training, reporting, and human risk management. Why Choose Fitch: • Hybrid Work Environment: On-site presence required two days per week., • A Culture of Learning & Mobility: Access to dedicated training, leadership development, and mentorship programs to support continuous learning., • Investing in Your Future: Retirement planning and tuition reimbursement programs to help you meet your short- and long-term goals., • Promoting Health & Wellbeing: Comprehensive healthcare offerings that support physical, mental, financial, social, and occupational wellbeing., • Supportive Parenting Policies: Family-friendly policies, including a generous global parental leave plan, designed to help you balance work and family life., • Inclusive Work Environment: A collaborative workplace where all voices are valued, supported by Employee Resource Groups that unite and empower colleagues worldwide., • Dedication to Giving Back: Paid volunteer days, matched donation programs, and ample opportunities to volunteer in your community. Fitch is committed to providing global securities markets with objective, timely, independent and forward-looking credit opinions. To protect Fitch’s credibility and reputation, our employees must take every precaution to avoid conflicts of interest or any appearance of a conflict of interest. Should you be successful in the recruitment process at Fitch Ratings you will be asked to declare any securities holdings and other potential conflicts prior to commencing employment. If you, or your immediate family, have any holdings that may conflict with your work responsibilities, you may be asked to divest yourself of them before beginning work. Fitch is proud to be an Equal Opportunity and Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, national origin, religion, sex, sexual orientation, gender identity, disability, protected veteran status, and other statuses protected by law.

Department: Governance & Risk Employment Type: Permanent - Full Time Location: Manchester, UK The Group Information Security Risk Analyst will play a key role within Arrow's Group Information Security Function by maintaining the Information Security Risk Framework, delivering high-quality risk assessments and reporting, engaging with stakeholders to drive remediation activities, and ensuring a proportionate and risk-based approach is applied across a diverse range of business sectors. The role will also support wider Information Security activities including third-party security assurance, due diligence reviews, responses to security questionnaires, audit activities, and security awareness initiatives as required. • Conduct information security risk assessments across Arrow Global Group and portfolio companies using recognised risk assessment methodologies and frameworks., • Produce high-quality risk assessment reports, management summaries, and recommendations for both technical and non-technical stakeholders., • Track and monitor remediation actions arising from assessments, audits, incidents, and reviews, ensuring timely resolution of identified risks., • Work closely with stakeholders to ensure recommendations are understood, agreed, and appropriately implemented., • Escalate significant, overdue, or unresolved information security risks through appropriate governance channels., • Support the ongoing development, maintenance, and improvement of the Group Information Security Risk Framework., • Assess the effectiveness of information security controls and identify opportunities for improvement., • Apply recognised security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, PCI-DSS, and other relevant best practices in a proportionate and risk-based manner., • Liaise with Cyber Security, IT, Business Continuity, Data Protection, Risk, Compliance, and Internal Audit teams to ensure security requirements are appropriately reflected within assessment activities., • Support third-party security assurance activities, including supplier security reviews, due diligence assessments, and ongoing monitoring of third-party risks., • Contribute to governance reporting through the preparation of metrics, risk dashboards, management information, and committee papers., • Maintain awareness of emerging threats, vulnerabilities, regulatory developments, Artificial Intelligence (AI) risks, and industry best practices., • Educated to degree level in Information Security, Cyber Security, Computer Science, Information Systems, Risk Management, Business Management, or equivalent levels of experience., • A minimum of 5 years' proven experience within Information Security, Cyber Security, IT Risk, or related disciplines., • Strong understanding of Information Security Risk Management principles and methodologies., • Experience conducting risk assessments, control reviews, audits, or assurance activities., • Technical knowledge of information security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, DORA, PCI-DSS, and related security practices., • Strong communicator with positive influencing and interpersonal skills., • Ability to synthesise complex technical and business information and present findings in a clear and concise manner., • Effective prioritisation and organisational skills with the ability to manage multiple competing priorities., • Strong analytical and problem-solving skills., • Experience producing professional reports and management presentations., • Understanding of cloud technologies and associated information security risks., • Awareness of Artificial Intelligence (AI), associated risks, governance considerations, and emerging industry developments. #J-18808-Ljbffr

Capgemini in the UK is hiring a Security Incident Management Analyst for a 5‑day onsite role in Preston. You will detect, investigate and escalate threats, monitor security systems, log incidents, and support continuous improvement. You should have a background in IT or cybersecurity, strong analytical thinking, and good communication. Nice-to-have SIEM experience (QRadar, Splunk, Sentinel) and knowledge of TCP/IP and common threats. #J-18808-Ljbffr

The Information Security Analyst is responsible for supporting the effective operation of information security controls, services, and processes across the organisation. Reporting to the Information Security Manager, the role provides hands‑on security analysis, monitoring, assurance, and risk support across on‑premise and cloud environments. The role works closely with Technology teams, third‑party providers, and business stakeholders to help protect the organisation’s information assets, reduce cyber risk, and maintain compliance with security policies, standards, and regulatory requirements. Responsibilities will include: Security Operations & Monitoring • Support the day‑to‑day operation of information security controls and services., • Monitor security tooling, alerts, and dashboards, including SOC and SIEM outputs., • Investigate and respond to security events and incidents in line with agreed procedures., • Escalate security incidents and risks to the Information Security Manager as appropriate. Security Assurance & Risk Support • Perform assurance activities to assess the effectiveness of security controls., • Support gap analysis, compliance readiness, and ongoing compliance monitoring., • Assist with the identification, assessment, and documentation of security risks., • Track remediation actions and follow up with control owners. Incident Response & Problem Support • Support security incident response activities, including investigation and evidence gathering., • Assist with root cause analysis and documentation of lessons learned. Contribute to improvements in controls, processes, and preventative measures. Policy, Standards & Governance • Support the maintenance and operation of information security policies, standards, and procedures., • Provide guidance to Technology and business teams on security requirements and best practice., • Ensure security activities are documented and auditable. Third‑Party & Audit Support • Support third‑party security due diligence, reviews, and assurance activities., • Assist with responses to internal and external audits, assessments, and regulatory requests., • Gather and provide evidence to demonstrate effective operation of security controls. Security Awareness & Culture • Support the delivery of security awareness and training activities., • Promote a positive security and compliance culture across the organisation., • Contribute to communications and materials that improve security understanding and behaviour., • Produce security reports and metrics for both technical and non‑technical audiences., • Assist with analysis of trends, threats, and emerging risks., • Contribute ideas and improvements to enhance security processes and controls. Skills and Experience • Experience in an information security, IT risk, or IT operations role., • Understanding of common cybersecurity risks, threats, and control types., • Familiarity with incident management, risk assessment, and assurance activities., • Ability to analyse information, identify issues, and document findings clearly., • Strong written and verbal communication skills., • Ability to manage multiple tasks and priorities with attention to detail., • Experience working in regulated or enterprise environments., • Exposure to cloud security concepts (e.g. Azure security services)., • Experience with security tooling such as SIEM, endpoint protection, or vulnerability management tools., • Relevant education or certifications (or working towards) in information security. Our benefits We offer all employees a comprehensive benefits package that focuses on their whole wellbeing. • hybrid working, • a competitive base salary, • non-contributory pension, • discretionary bonus, • insurances including health (family) and dental cover, • many other benefits to enhance financial, physical, social and psychological health About Canopius Canopius is a global specialty lines (re)insurer. We are one of the leading insurers in the Lloyd’s of London insurance market with offices in the UK, US, Singapore, Australia and Bermuda. At Canopius we foster a distinctive, positive culture which enables us to bring our whole selves to work to flourish as people, and build a business which delivers profitable, sustainable results. Based in incredible new offices in the heart of the City of London, Canopius operates a flexible, hybrid working model and is committed to providing an environment that challenges employees to be their best and where everyone's unique contributions are recognised, valued and respected. We are fully committed to equal employment opportunities for all applicants and providing employees with a work environment free of discrimination and harassment. All employment decisions are made regardless of age, sex, gender identity, ethnicity, disability, sexual orientation, socio-economic background, religion or beliefs, marital or caring status, or any other status protected by the laws or regulations in the locations where we operate. We encourage and welcome applicants from all diverse backgrounds. We make reasonable adjustments throughout the recruitment process and during employment. Please let us know if you require any information in an alternate format or any other reasonable adjustments. • Job Identification 639, • Job Category Information & Technology, • Job Schedule Full time, • Locations Level 5, Manchester, M2 3AB, GB (Hybrid) #J-18808-Ljbffr

A leading cybersecurity firm in Greater Manchester is looking for a Network Threat & Vulnerability Analyst to join their growing team.The role involves performing incident response, conducting vulnerability assessments, and collaborating with teams to enhance network security.Candidates should have

Arup seeks a Senior Governance, Risk and Compliance Analyst to strengthen cybersecurity governance, risk and compliance across its global digital technology landscape. You will develop IT Disaster Recovery plans, lead risk assessments, and promote security-by-design in projects and products.

Cyber Security Manager - Manchester Location - £45K A prominent non-profit housing provider in the North West is seeking a Cyber Security Engineer to join their central IT division. This role is ideal for a Cyber Security Analyst or Systems Administrator with security exposure who is ready to step into a dedicated engineering role. Working alongside internal IT, infrastructure teams, and an external managed Security Operations Centre (SOC), you will play a key role in hardening environments, managing threats, and driving security improvement projects across a modern cloud ecosystem. • Proactive Security Improvements: Identify security weaknesses and drive hands-on remediation across systems, cloud (Azure), and network infrastructure., • Incident Triage & SOC Collaboration: Act as an internal technical escalation point, investigating alerts and working alongside an external managed SOC partner., • Vulnerability & Endpoint Management: Manage vulnerability scanning outputs, prioritize patches, and tune security tooling (EDR, SIEM, email security)., • Secure Design: Work with infrastructure and application teams to embed "secure-by-design" principles into ongoing projects., • Stakeholder Engagement: Communicate effectively across IT teams to ensure security fixes are prioritized and implemented., • Hands-on Exposure: Practical background in cybersecurity operations, triage, or IT infrastructure security., • Tooling Familiarity: Experience working with vulnerability scanners, endpoint detection (EDR), and Microsoft/Azure security environments., • Proven Involvement: Demonstrated experience directly configuring, deploying, or remediating security controls (not just watching from the sidelines)., • Drive & Confidence: Eagerness to challenge existing practices, take ownership of projects, and grow technical skills., • Certifications/Qualifications: None strictly required; practical drive and technical curiosity are valued above certifications. This is a great opportunity to expand on your existing skillset and further your career in a meaningful way. #J-18808-Ljbffr

Senior Cyber Security Analyst with a AWS cloud background is required to join our global client's new UK cybersecurity team. Senior Cyber Security Analyst - AWS - PCI DSS - Manchester. Cyber Security within an AWS cloud environment.

ITOL Recruit’s Cyber Security Analyst Traineeship is designed for career changers and entry-level candidates looking to break into one of the UK’s fastest-growing industries. Train online at your own pace and land your first Cyber Security Analyst role in as little as 1–3 months. Trainee Cyber

Desirable Skills Microsoft Security Operations Analyst Associate certification.

Trainee Cyber Security – No Experience Required From £30,000 - £65,000.This is a self-funded career programme with a guaranteed job on completion or 100% of your course fees back* Train.Are you looking to start a career in Cyber Security but don't know where to begin? With cyber threats continui

We sort trainee warehouse operative competitive salary jobs with better pay, shorter commutes and sooner starts in mind.Explore your options and find your next move.

We sort warehouse operative x 70 £ 3000 joining bonus immediate start jobs with better pay, shorter commutes and sooner starts in mind.Explore your options and find your next move.

Our Cybersecurity Consulting Practice is rapidly expanding, and we are investing in our capabilities to meet the increasing demand for cybersecurity solutions. You will play a pivotal role in managing cybersecurity engagements, building client relationships, and leading teams to develop innovative s

We sort warehouse operative dn4 jobs with better pay, shorter commutes and sooner starts in mind.Explore your options and find your next move.

Automotive cybersecurity certification. The role covers cybersecurity planning, threat analysis, requirements, implementation assurance, validation evidence and regulatory compliance. Coordinate cybersecurity verification, validation and penetration testing.

We sort temporary warehouse operative jobs with better pay, shorter commutes and sooner starts in mind.Explore your options and find your next move.

Coordinate cybersecurity verification, validation and penetration testing. Maintain cybersecurity work products, assumptions, risks and traceability. Degree in cybersecurity, software, electrical, electronic or automotive engineering.

We sort warehouse operative rotating jobs with better pay, shorter commutes and sooner starts in mind.Explore your options and find your next move.

NCC Group is hiring a L2 SOC Analyst for the MXDR Team in Manchester.

We sort warehouse operative/forklift driver jobs with better pay, shorter commutes and sooner starts in mind.Explore your options and find your next move.

A leading financial services firm in the UK is seeking a Senior SOC Analyst (L3) to drive incident management and security operations.

We sort warehouse operative doncaster jobs with better pay, shorter commutes and sooner starts in mind.Explore your options and find your next move.

As a senior member of the team, you will coach and mentor junior and mid-level analysts and may act as the technical lead for a shift, investigation, or major incident. Bachelor’s degree or 5+ years of experience in an information technology, cybersecurity, or incident response field in lieu of a

We sort warehouse production operative jobs with better pay, shorter commutes and sooner starts in mind.Explore your options and find your next move.

We sort warehouse operative- barking jobs with better pay, shorter commutes and sooner starts in mind.Explore your options and find your next move.

We sort junior cyber security analyst jobs with better pay, shorter commutes and sooner starts in mind.

Reporting to the Information Security Lead - SecOps Response, the analyst’s main responsibilities include:. GIAC Certified Forensic Analyst (GCFA).

We sort warehouse operative alvaston jobs with better pay, shorter commutes and sooner starts in mind.Explore your options and find your next move.

Information Security Compliance Analyst. Are you passionate about cybersecurity, compliance, and driving risk management strategies? We’re seeking an experienced. Information Security Compliance Analyst.

We sort warehouse operative lead jobs with better pay, shorter commutes and sooner starts in mind.Explore your options and find your next move.

To support our growth, we are looking for SOC Analysts to join our growing cyber security function.

We sort warehouse operative position jobs with better pay, shorter commutes and sooner starts in mind.Explore your options and find your next move.

We sort picker packer and warehouse operative jobs with better pay, shorter commutes and sooner starts in mind.Explore your options and find your next move.

Reporting to the Information Security Lead - Detection, the analyst’s primary responsibility will be to proactively identify and defend against potential threats to the bank. GIAC Certified Forensic Analyst (GCFA).

We sort staffline warehouse operative m&s jobs with better pay, shorter commutes and sooner starts in mind.Explore your options and find your next move.

Fitch is seeking an Information Security GRC Analyst to support the delivery and ongoing development of its Cyber Security Awareness and Education program.

We sort banbury warehouse operative jobs with better pay, shorter commutes and sooner starts in mind.Explore your options and find your next move.

Working alongside SOC analysts, engineers, architects, and stakeholders, you'll help build modern security monitoring capabilities that improve resilience while enabling faster, risk-based decision-making.

We sort amazon warehouse operative warehouse jobs with better pay, shorter commutes and sooner starts in mind.Explore your options and find your next move.

Approximately five years’ experience in an Information Security Analyst, Cyber Compliance Analyst, or similar InfoSec compliance role. IT Information Security Analyst - Compliance. A fantastic opportunity has arisen for an IT Information Security Analyst to join a respected professional services o

We sort warehouse operatjve/containet operative jobs with better pay, shorter commutes and sooner starts in mind.Explore your options and find your next move.

To support our growth, we are looking for SOC Analysts to join our growing cyber security function.