Senior Security Operations Analyst - Permanent - Hybrid London - up to £65k
Reporting To:
Security Operations Lead
About the Client
Our client is a leading organisation protecting the IP, data, and digital assets of thousands of professionals and enterprise partners.
Role Overview
As a Senior Security Operations Analyst, you will play a pivotal role in safeguarding critical enterprise data, employee environments, and stakeholder systems. You will lead cross‑functional security initiatives, drive incident response, and expand existing security tooling integrations across key domains including SOC, DLP, IAM, and Vulnerability Management. This role also serves as operational deputy to the Security Operations Lead during incident response scenarios.
Key Responsibilities
Identity Governance & Privileged Access (IGA / PAM / EPM): Define functional specifications for IGA/PAM solutions, ensure platform health and support, and oversee day‑to‑day operational IAM processes (including Okta, Azure AD, SailPoint, and EPM rollouts).
Data Loss Prevention (DLP): Maintain and support DLP controls, establish business functional specifications, and manage day‑to‑day DLP oversight.
Security Operations & Incident Response: Respond to SOC escalations, oversee enterprise vulnerability remediation, and serve as deputy for the Security Operations Lead during active incidents.
Security Change Management: Assess security risk postures regarding organisational changes and document configuration decisions to prevent compatibility or access friction.
Training & Awareness: Help run internal security awareness programmes, phishing simulations, and general cybersecurity best‑practice education.
Stakeholder & Vendor Collaboration: Build strong relationships across operational IT, Application Support, Managed Service Providers (MSPs), and Data Governance/Privacy teams.
Key Requirements & Qualifications
Education: Bachelor’s degree (or equivalent experience) in a technical discipline.
Certifications (Preferred): One or more security credentials (CISSP, CISM, GIAC/GSEC, CIPP/E, CIPM) or IT governance/IAM certifications (ITIL, Microsoft AD).
Technical Expertise: Hands‑on experience with DLP tools, Data Classification, Access Management/Federation systems (Okta, Azure, SailPoint/Idera), and Endpoint Privilege Management (EPM).
Privacy & Governance: Deep understanding of data privacy guidance, including structured/unstructured personal data handling and deletion processes.
Stakeholder Management: Proven track record of interfacing with senior leadership, internal technical teams, and external IT partners.
Core Competencies
Pragmatic Decision‑Making: Balances short‑ and long‑term implications to support overall risk posture; takes full ownership of security outcomes.
Solution‑Oriented Delivery: Constructively challenges legacy processes to introduce modern best practices and resolve complex technical blockers.
Translates Complexity: Able to synthesize technical threats and compliance data into actionable advice for non‑technical business partners.
We use essential cookies to make this site work. With your permission we would also like to use the optional cookies below. Nothing optional is set until you choose, and you can change your mind at any time from "Cookie settings" at the bottom of every page. Cookie policy.
Essential — keep the site working and secure, and remember the choice you make here. Always on.