Integrated Security Analyst

Role overview

Security monitoring and incident response

• Monitor and analyse security events across IT, OT, and physical security environments.
• Investigate cyber, OT, and physical security incidents and escalate issues according to site procedures.
• Collect forensic evidence and contribute to incident reviews and continuous improvement.

Asset, risk, and access management

• Maintain security asset inventories and support Critical Digital Asset identification and classification.
• Assist with vulnerability management, risk assessments, and the Security Risk Register.
• Conduct access reviews and support logical and physical access control processes.

Compliance and security assurance

• Help implement security policies, standards, and procedures.
• Maintain audit evidence and contribute to regulatory inspections and compliance activities.
• Monitor adherence to security frameworks, regulatory requirements, and industry standards.

OT and physical security integration

• Collaborate with OT engineers and physical security teams to strengthen site-wide security controls.
• Review network segmentation, remote access arrangements, and physical protection systems.
• Identify opportunities to improve cyber and physical security integration.

Threat intelligence and supplier security

• Review and communicate relevant threat intelligence to stakeholders.
• Contribute to security awareness projects across the business.
• Support supplier and contractor security assessments and third-party access assurance.

Qualifications

• Experience in cyber security, OT security, physical security, or a related discipline within a regulated or critical infrastructure environment.
• Working knowledge of security monitoring technologies, networking fundamentals, and system security principles.
• Understanding of IT security, OT/ICS security, or physical security systems.
• Documentation skills for audit, compliance, and regulatory records.

Desirable skills and certifications

• Experience in the UK nuclear sector or another critical national infrastructure environment is desirable.
• Familiarity with NISR, ONR Security Assessment Principles, and the NCSC Cyber Assessment Framework is desirable.
• Security+, CySA+, GICSP, or an equivalent professional certification is desirable.
• Experience supporting audits, inspections, or regulatory assessments is desirable.
• Active or transferable SC/DV clearance is desirable.

Workplace

• The role is site-based at Springfields Fuels Ltd in the Preston area.

Benefits

• UK employee benefits include life insurance, a pension plan, employee assistance resources, learning and development opportunities, and peer recognition.