£60,000 - £65,000 + Benefits + Bonus
Hybrid - 2 Days per Week in Bath
Are you a hands-on cyber security professional looking for your next challenge with a fast-growing, forward-thinking financial services group? This is your chance to join a business that's investing heavily in its security function, giving you real ownership over how it protects its systems, its people, and its clients' data.
You'll work closely with the Head of Information Security, playing a central role in shaping security policy, responding to live incidents, and driving forward the tools and processes that keep the organisation resilient. If you want a role with genuine variety, autonomy, and the backing of a business that takes security seriously, this is well worth a conversation.
What you'll be doing:
Working alongside the Head of Information Security to shape and deliver the organisation's security policy and strategy
Implementing and monitoring security controls across systems, networks, applications and customer data, including cloud and on-premises environments (Microsoft 365, Entra ID, servers, endpoints and network infrastructure)
Detecting, responding to and remediating cyber incidents, and overseeing vulnerability management and patching in partnership with IT and the wider business
Running security assessments and testing - configuration reviews, penetration test remediation and risk assessments - and supporting regulatory and audit activity (FCA, GDPR, ISO 27001)
Advising projects and technology teams on secure-by-design principles, and continuously improving security monitoring, automation and detection capabilitiesWhat you'll bring:
3+ years' experience in a cyber security role, with hands-on knowledge of Microsoft 365, Entra ID, Purview, endpoint security, SIEM and vulnerability management
Proven experience in incident response and security monitoring
Solid understanding of ISO 27001, GDPR and financial services regulatory requirements
An advanced security certification such as CISSP, CISM, CCSP, GIAC or equivalent
Experience conducting security assessments, technical reviews and supporting audit activities
It would also be great (but not essential) if you had exposure to cloud security, security automation or architecture, FCA/PRA/DORA and cyber resilience requirements, mentoring or leading technical projects, SIEM/EDR/IAM tooling, Microsoft Purview DLP, or KQL/JSON for queries and automationWhat's on offer:
£65,000 base salary with discretionary annual bonus
Hybrid working - just 2 days a week in the Bath office
34 days' holiday (including bank holidays), with the option to buy or sell up to 5 additional days
Private medical, income protection and life assurance cover
A generous pension scheme, interest-free season ticket loan, and a paid day off each year for a life eventIf you're an experienced cyber security professional who wants a role with real impact, apply now or get in touch for a confidential conversation about this opportunity.
If you've held any of these roles or used these technologies/skills, this role could be a great fit: Cyber Security Analyst, Information Security Analyst, IT Security Analyst, SOC Analyst, Security Operations Analyst, Cyber Security Engineer, Security Analyst, Vulnerability Management Analyst, Incident Response Analyst, or Security Compliance Analyst, and/or experience with Microsoft 365, Entra ID, Microsoft Purview, SIEM, EDR, ISO 27001, GDPR, CISSP, CISM, CCSP, GIAC, KQL, or JSON.
Deerfoot Recruitment Solutions Ltd is a leading independent tech recruitment consultancy in the UK. For every CV sent to clients, we donate £1 to The Born Free Foundation. We are a Climate Action Workforce in partnership with Ecologi. If this role isn't right for you, explore our referral reward program with payouts at interview and placement milestones. Visit our website for details. Deerfoot Recruitment Solutions Ltd is acting as an Employment Agency in relation to this vacancy
Salary description
£60000.00 - £65000.00 per year