Security Analyst

Information Security Analyst (GRC)

Scotland | Remote

A well-established and growing technology business is looking for an Information Security Analyst to join its team and play a central role in how security is governed and delivered across its client base.

With a scale-up feel and continued investment in its security services, digital capability and AI, the business offers a genuine opportunity to grow with it. This position is focused on governance, risk and compliance rather than hands-on engineering, and offers a clear development path into security advisory and virtual CISO work.

You’ll work closely with infrastructure engineers, service delivery colleagues, specialist security partners and clients to turn security insight into practical action, making sure risks are understood, prioritised and resolved.

The role would suit someone from an IT support, infrastructure or security operations background who has strong technical foundations and is keen to move towards the risk and compliance side of cyber security.

Responsibilities

• Review alerts and findings from managed security tools, identifying what matters and coordinating follow-up
• Track vulnerabilities, patching and configuration weaknesses through to resolution with engineering teams
• Review Microsoft 365 and endpoint security posture across clients and recommend practical improvements
• Write and maintain security policies, standards and procedures for clients to follow
• Support incident triage, escalating serious issues to the appropriate teams and partners
• Turn technical security information into clear, plain-English reporting for clients and colleagues
• Support client onboarding and security health checks
• Provide evidence and support for Cyber Essentials and wider assurance activity
• Help improve internal playbooks, escalation routes and security standards
• Work with external security vendors and specialist providers

Requirements

• Background in IT support, infrastructure or security operations
• Good understanding of Windows endpoints, Microsoft 365, identity and networking
• Knowledge of security fundamentals including patching, endpoint protection, MFA and access controls
• Ability to prioritise based on risk rather than alert volume
• Strong written communication skills, with the ability to produce clear policies and reports
• Confidence explaining technical risk to non-technical stakeholders
• Organised and self-motivated, able to work independently in a remote environment
• Genuine interest in developing a career in governance, risk and compliance

Desirable

• Experience with Cyber Essentials, Cyber Essentials Plus or ISO 27001
• Exposure to tools such as Microsoft Defender, Intune, Entra ID, CrowdStrike, Fortinet or ConnectWise
• CompTIA Security+, Microsoft SC-900 or equivalent certification
• Experience writing technical documentation, policies or procedures
• Client-facing experience

Candidates don’t need to meet every requirement. The business is primarily interested in people with solid technical foundations, sound judgement and a genuine interest in the risk side of security, and will support the right person to grow into the role.

This is an opportunity to join a growing business at an exciting stage, with real autonomy, close-knit team culture and a clear path into senior security advisory work.

The role is remote, with travel to the office one to two days a month, fully paid for. The position offers a competitive base salary, quarterly incentives and benefits.

Provn Talent Solutions Ltd is operating as an employment agency under the Conduct of Employment Agencies and Employment Businesses Regulations 2003. Your application will be handled in line with our Privacy Policy.