Cyber Essentials Analyst

Role overview

Location and contract

• The role is described as hybrid in Manchester.
• The description states permanent employment.

Key responsibilities

• Lead customers through the Cyber Essentials and Cyber Essentials Plus certification lifecycle and conduct readiness assessments across the five control areas.
• Identify compliance gaps and recommend risk-based remediation; support configuration changes, policy enablement, security baselines, and certification readiness.
• Coordinate remediation with Support and Engineering teams and prepare evidence packs, technical documentation, screenshots, and IASME submission materials.
• Guide technical and non-technical stakeholders, support Cyber Essentials Plus audits, and coordinate resolution of audit findings.
• Track changes to requirements, security practices, and threats; identify further security improvements for customers.
• Contribute to process improvements, templates, documentation, service methods, and automated compliance and reporting capabilities.
• Identify opportunities for customers to benefit from additional security services.

Essential skills and experience

• Experience in IT infrastructure, systems administration, cybersecurity, managed services, or a similar technical environment.
• Strong Microsoft 365 and Azure administration knowledge, including tenant security and conditional access.
• Experience with endpoint management and patching tools such as Microsoft Intune, Datto RMM, or similar platforms.
• Understanding of network architecture, firewalls, security controls, endpoint protection, vulnerability management, remediation, and security hardening.
• Strong communication, organization, attention to detail, and documentation skills; able to manage competing priorities and work independently and collaboratively.
• Occasional customer site visits may be required.

Desirable skills

• Cyber Essentials or Cyber Essentials Plus assessment experience is desirable.
• Knowledge of ISO 27001, SOC 2, or the NCSC Cyber Assessment Framework is desirable.
• CompTIA Security+, Microsoft SC-900, or IASME Cyber Essentials Practitioner certifications are desirable.
• ITSM tools such as ServiceNow, documentation platforms such as IT Glue or Hudu, and cyber risk methodologies are listed as desirable.
• The available description also lists exposure to Security Operations Centres and SIEM; the text ends before the remainder of this section.