Senior IT Security Analyst

Role purpose

Work arrangement

• Hybrid working with a minimum of three days per week in the Leeds office.

Key accountabilities

• Manage and improve Microsoft security, compliance, user and data protection tooling.
• Design, deliver and manage Microsoft Purview, Data Loss Prevention and related information protection controls.
• Lead and support identity governance, access control and RBAC through the Joiner-Mover-Leaver lifecycle, including access reviews.
• Identify risks, vulnerabilities, control gaps and emerging threats; support remediation and escalation.
• Support assigned incident response, including investigation, evidence gathering, stakeholder updates, reporting and escalation.
• Support compliance, maintain control evidence, undertake spot checks, assist audits and remediate findings.
• Support security awareness activity and promote secure behaviours.
• Collaborate with internal stakeholders, managed service providers and third parties on security guidance and control improvements.
• Report on risks, incidents, control effectiveness and remediation, and propose recommendations.
• Contribute to wider Information Security priorities and assigned workstreams.

Role capabilities

• The position requires day-to-day operation and improvement of information security controls and Microsoft security tooling.
• The role involves assessing risks and control gaps, supporting incident response, maintaining assurance evidence and collaborating with stakeholders.

About the National Wealth Fund