Security Analyst

Security Analyst Job Title: Security Analyst Line Manager: Lead Security Analyst Citation is a £280M+ PE-backed provider of compliance, verification, and certification services to 120,000+ global clients. Our growth combines organic development with 2-3 strategic acquisitions per year, requiring rapid integration of new capabilities while maintaining exceptional client outcomes. We operate as an AI-first business, continuously exploring how emerging technologies can transform operations and services. Role Overview: We're looking for a motivated Cyber Security Analyst to join our growing team. This is an excellent opportunity for someone with an IT or cyber security background who enjoys working with clients, solving technical challenges and helping organisations improve their cyber resilience. You'll be responsible for delivering Cyber Essentials and Cyber Essentials Plus assessments, guiding organisations through the certification process and providing practical advice to help them achieve compliance. Alongside certification work, you'll carry out vulnerability scanning, review security findings, advise on patch management and support clients in strengthening their overall security posture. Working within our experienced cyber security team, you'll receive ongoing training and have the opportunity to develop your skills across a range of security disciplines.. What You'll Be Doing Deliver Cyber Essentials and Cyber Essentials Plus assessments in line with IASME and NCSC requirements. Review Cyber Essentials questionnaires and supporting technical evidence. Provide clear, practical guidance to clients throughout the certification process. Conduct vulnerability scans against client environments using industry-standard tools. Analyse vulnerability scan results and produce clear remediation recommendations. Review operating systems, applications and network devices to identify missing security updates. Assess patch management processes and advise clients on improving their vulnerability management practices. Assist clients with remediation activities to help them achieve certification. Produce high-quality assessment reports and technical documentation. Maintain accurate records of assessments and certification activities. Keep up to date with Cyber Essentials requirements, emerging cyber threats and industry best practice. Work collaboratively with colleagues across the penetration testing and compliance teams. What We're Looking For Essential Minimum of three years' experience in an IT or cyber security role within the last five years. Good understanding of Windows, macOS and Linux operating systems. Experience with Microsoft 365 administration and security features. Understanding of networking fundamentals including TCP/IP, DNS, firewalls and VPNs. Knowledge of vulnerability management and security best practices. Good understanding of software patching and operating system update processes. Excellent written and verbal communication skills. Strong attention to detail and problem-solving ability. Ability to explain technical concepts to both technical and non-technical audiences. Desirable Experience using vulnerability scanning tools such as Nessus, Qualys, OpenVAS or similar. Cyber Essentials Assessor qualification. Experience delivering Cyber Essentials and/or Cyber Essentials Plus assessments. Security+, CISM, CISSP, ISO 27001 Lead Auditor or equivalent certifications. Experience with vulnerability remediation and security consultancy. What We Offer Competitive salary. Company pension scheme. 25 days annual leave plus bank holidays. Additional day off for your birthday. Ongoing training and funded professional certifications, including Cyber Essentials Assessor, CREST and Cyber Scheme qualifications. Clear career progression within a growing cyber security consultancy. Exposure to a wide range of organisations across multiple industries. Supportive team environment with opportunities to broaden your technical skills beyond Cyber Essentials. Why Join Us? Our clients trust us to help protect their businesses from evolving cyber threats. We invest heavily in our people, encourage continuous learning and provide opportunities to work across compliance, vulnerability management, penetration testing and wider cyber security services. If you're passionate about cyber security, enjoy working with clients and want to build your career within an experienced and growing team, we'd love to hear from you Department Group Tech Locations Citation Cyber Remote status Fully Remote About Citation Group The Citation Group provides mission-critical compliance, HR and health & safety services and software to over 120,000 businesses across the UK, Australia and Canada. Professionals with personality - serious about what we do, brilliant to work with. Backed by Hg, KKR and HarbourVest. Founded in 1995 Co-workers 2000 Turnover 200M