National AI Awards 2025Discover AI's trailblazers! Join us to celebrate innovation and nominate industry leaders.

Nominate & Attend

Information Security Analyst

Cyfoeth Naturiol Cymru / Natural Resources Wales
London
3 days ago
Create job alert

Join to apply for the Information Security Analyst role at Cyfoeth Naturiol Cymru / Natural Resources Wales
Join to apply for the Information Security Analyst role at Cyfoeth Naturiol Cymru / Natural Resources Wales
Team / Directorate: Information Management & Security Team, Finance and Corporate Services

Starting salary: £36,246 rising to £39,942 per annum through annual increments being paid each year (pro rata for part time applicants)

Contract type: Permanent

Work pattern: Full time, 37 hours per week (Part time, annualised hours, compressed hours or term time working considered - discussions at interview stage welcome)

Post number: 203864

The role

As an Information Security Analyst, you will play a pivotal role in managing and enhancing the organisation's DDaT information security operations. You will respond to incidents, breaches and requests within the team's scope, using experience and problem-solving skills to investigate and resolve in a timely and efficient manner.

This post will work with the business to complete Data Protection Impact Assessments to comply with legislative standards. This post sits in a team of Information and Cyber Security specialists, working closely with other Specialist Advisors and Analysts, Senior Specialist/Information Management and Security Team Leader, Senior Specialist Cyber Security.

You will collaborate closely with key stakeholders, including the Information Management and Security Senior Specialist/Team Leader, Data Protection Officer, Senior Specialist Cyber Security, specialist security officers and other security analysts. This role will be responsible for collating risk and security data including threat intelligence from a number of sources.

As an organisation we support flexible working. You will be contracted to the nearest NRW office to your home and a suitable hybrid working pattern will be agreed on appointment. Any regular face to face meetings or training will be planned in advance.

To make an informal enquiry about this role, please contact Tracey Gilliland at

Interviews will be conducted via Microsoft Teams.

Successful external applicants will be subject to a satisfactory Disclosure and Barring Service Check (DBS) check. We aim to make offers of appointment within 4 to 8 weeks of the closing date.

What you will do

Take responsibility for incidents and requests within the team's scope, using experience and problem-solving skills to investigate and resolve in a timely and efficient manner.
Engage in clear communications with staff to manage and resolve incidents, remediation and exception management. Use Defender and ATP to investigate and resolve hardware and/or software security incidents.
Maintain a strong relationship with the ICT Service Desk to share 2nd line expertise, and peers in other operational teams to develop a robust problem management team, working closely to investigate ongoing issues.
Act as subject matter expert in specialist areas.
Undertake health and safety duties and responsibilities appropriate to the post
Be committed to Natural Resources Wales Equal Opportunities and Diversity Policy , together with an understanding of how it operates within the responsibilities of the post
Be committed to your own development through the effective use of your personal development plan (known as Sgwrs).
Any other reasonable duties requested commensurate with the grade of this role.

Your Qualifications, Experience, Knowledge And Skills

In your application and interview you will be asked to demonstrate the following skills and experience using the STAR method .

Data Protection Partitioner certified desirable
Have significant experience in working in the information security field ideally in the public sector.
Demonstrate experience in applying physical and personnel security principles in supporting information security.
Excellent verbal and written communication skills, comfortable and confident in dealing with challenging situations/individuals and a clear commitment to delivering excellent customer service and user's experience.
Ability to analyse security issues and requests, utilising the appropriate analysis techniques. To do this, it is important to be able to absorb new information readily, as new ways of working are brought into the team's remit and be able to understand and document user requirements.
Ability to work within a high-pressure environment, to proactively plan and co-ordinate resources in order to achieve results within agreed timescales and with a flexible approach to working, prioritising as and when high priority problems and requests arrive at the DDaT Security Team.
This role requires national security vetting, you will be required to meet SC level ).https://www.gov.uk/government/publications/demystifying-vetting
You will be required to be part of an out of hours rota

Welsh Language Level Requirements

Essential: Level A1 - Entry level (able to use and understand simple, basic phrases and greetings, no conversational Welsh)

Please note if you do not meet the A1 requirement i.e., ability to understand basic phrases and ability to pronounce Welsh names correctly, then NRW offers a variety of learning options and staff support to help you meet these minimal requirements during the course of your employment with us.

Benefits

This role will offer a range of benefits, including:

Civil Service Pension Scheme offering employer contributions of 28.97% (successful internal staff will remain in their current pension scheme)
28 days annual leave, rising to 33 days
generous leave entitlements for all your life needs
commitment to professional development
health and wellbeing benefits and support
weekly wellbeing hour to use as you choose

See full details for all the employee benefits you will receive.

Please keep reading

We're passionate about creating a diverse workforce and positively encourage applications from under-represented communities. We embrace equality of opportunity irrespective of disability, neurodivergence, ethnic origin,colour, nationality, gender expression and gender identity, marital status, sexual orientation,culture,or religion. We put the principles of human rights, equality, fairness, dignity and respect at the heart of our values .

We are committed to equal opportunities and we guarantee interviews for candidates with disabilities who meet the minimum selection criteria.

We want to attract and retain talented and highly skilled staff, so we make sure that our pay scales remain competitive. We advertise the full pay scale on our job descriptions. Appointed candidates start at the first point of the pay scale and annual increments are paid each year.

We want our staff to grow professionally and personally. From leadership development to access to further and higher education courses, our staff have opportunities to expand their knowledge on variety of topics, stay current in their field and continue to learn as their career progresses.

We are a Bilingual organisation which complies with the Welsh Language Standards . Welsh language skills are considered an asset to NRW, and we encourage and support staff to learn, develop and use their Welsh language skills.
Seniority level Seniority level Entry level
Employment type Employment type Full-time
Job function Job function Information Technology
Referrals increase your chances of interviewing at Cyfoeth Naturiol Cymru / Natural Resources Wales by 2x
Get notified about new Information Security Analyst jobs in Wales, United Kingdom .
Cardiff, Wales, United Kingdom 3 weeks ago
Junior Security Operations Center Analyst Information Security Analyst - Cyber Threat Intelligence Cardiff, Wales, United Kingdom 4 weeks ago
Cardiff, Wales, United Kingdom 8 hours ago
Information Security Analyst - Legal & General Cardiff, Wales, United Kingdom 4 hours ago
Cardiff, Wales, United Kingdom 2 weeks ago
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

#J-18808-Ljbffr

Related Jobs

View all jobs

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

Information Security Analyst

National AI Awards 2025

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

LinkedIn Profile Checklist for Cybersecurity Jobs: 10 Tweaks to Supercharge Recruiter Engagement

In the ever-evolving realm of cybersecurity, having a LinkedIn profile that reflects both your technical prowess and threat-hunting acumen is vital. Organisations are on the lookout for professionals skilled in penetration testing, incident response, security architecture and compliance. With hiring managers scanning dozens of profiles daily, your profile needs to not just rank in searches but convey your expertise in safeguarding digital assets. This step-by-step LinkedIn for cybersecurity jobs checklist offers ten practical tweaks to supercharge recruiter engagement. Whether you’re an aspiring security analyst, a seasoned penetration tester or a chief information security officer aiming for board-level roles, these actionable optimisations will sharpen your LinkedIn presence and position you as a top infosec candidate.

Part-Time Study Routes That Lead to Cyber Security Jobs: Evening Courses, Bootcamps & Online Masters

The frequency and sophistication of cyber-attacks have exploded in recent years, making cyber security one of the UK’s most in-demand skill sets. From safeguarding NHS patient data to defending FTSE 100 financial systems, organisations across sectors require qualified professionals—penetration testers, security analysts, incident responders and security architects—to protect critical infrastructure. Yet many professionals cannot pause their careers to upskill full time. Fortunately, an ecosystem of part-time learning pathways—evening courses, intensive bootcamps and flexible online master’s programmes—enables you to learn cyber security while working. This comprehensive guide explores every route: foundational CPD, immersive bootcamps, accredited online MScs, plus funding options, planning strategies and a real-world case study. Whether you’re an IT support technician, a software developer or a compliance manager aiming to pivot into security, you’ll discover how to build expertise at your own pace.

The Ultimate Assessment-Centre Survival Guide for Cyber Security Jobs in the UK

Assessment centres for cyber security positions in the UK are designed to mirror real-world threat landscapes and test both your technical acumen and soft skills under pressure. Across multiple stages—psychometric assessments, penetration testing exercises, incident response group tasks, case studies, interviews and even informal networking breaks—employers assess your ability to identify vulnerabilities, collaborate in high-stakes scenarios and communicate effectively. This guide walks you through each component, equipping you to stand out and secure your next role in cyber defence.