Information Security Analyst

Information Security Analyst

Farnborough | Hybrid | Circa £50,000

We are recruiting for an Information Security Analyst to join a growing organisation based in Farnborough.

This is a varied role combininginformation security, ISO 27001, data protection and hands-on technical support. You’ll work closely with internal teams and customers, helping to resolve technical issues while ensuring that security, confidentiality and compliance remain at the heart of every interaction.

The role

You will be responsible for:

• Troubleshooting hardware, software and network-related issues
• Identifying, triaging and escalating potential security incidents
• Ensuring support activities follow ISO 27001 and data protection requirements
• Maintaining accurate documentation and audit trails
• Supporting the implementation of security controls and best practice
• Identifying gaps in security processes and recommending improvements
• Working closely with Customer Service, Field Teams, Information Security and Data Protection colleagues
• Communicating technical and security issues clearly to both technical and non-technical stakeholders
• Supporting continuous improvement across security procedures and working practices

What we’re looking for

You’ll ideally have:

• Previous experience within Information Security, technical support, infrastructure support or a similar environment
• Good knowledge ofISO 27001
• Understanding ofGDPR and data protection principles
• Experience troubleshooting hardware, software and network issues
• Knowledge of networking, cloud security and general IT security
• Strong incident triage and problem-solving skills
• Excellent written and verbal communication skills
• Strong attention to detail and organisation

Certifications such asCompTIA Security+, CISSP Associate or ISO 27001 Lead Implementer/Auditor would be advantageous but are not essential.

Security clearance

Successful security clearance and vetting will be required for this position.

This would suit someone who enjoys being technically hands-on but also wants exposure tocyber security, ISO 27001, compliance and incident management, rather than working in a purely GRC-focused position