Junior Information Security Analyst

A leading charity is looking to appoint a Junior Information Security Analyst, to cover an initial period of 3 months. Roles' responsibilities will include:
Provide hands-on support to run day-to-day information security activities, assist with incident response, and deliver agreed improvements that protect people, data and services. Working as part of a small team, you'll partner with Technology, Information Governance/DPO and key suppliers to reduce risk pragmatically, keep clear assurance records, and help colleagues work securely.

- Operational support:
Carrying out routine security tasks and checks; logging, triaging and progressing issues to agreed timescales.

- Incident assistance:
Supporting the response to security events (e.g. records/evidence, coordination, follow-up actions) under the direction of senior team members.

- Vulnerability & configuration hygiene:
Assisting with identification and remediation tracking with Technology teams; helping maintain secure configuration baselines.

- Identity & access support:
Helping to maintain good access practices, including joiner/mover/leaver processing and periodic reviews.

- Data protection controls:
Supporting practical measures that prevent accidental loss or unauthorised disclosure of information, in partnership with Information Governance/DPO.

- Supplier due diligence (first line):
Helping collect and file security artefacts for higher-risk suppliers/services and tracking agreed improvements with the team.

- Awareness & engagement:
Assisting with phishing simulations, targeted learning and simple, action-focused guidance for staff; tracking completion and handling queries.

- Risk, evidence & audit readiness:
Keeping accurate records, metrics and artefacts to support external assurance and internal audit activities.

- Runbooks & process improvement:
Maintaining clear operating procedures/playbooks; suggesting and implementing small improvements or automation to reduce manual work.

- Management information & KPIs:
Tracking, collating and providing monthly and quarterly security statistics (e.g. incidents, awareness completion, remediation progress) to the HoIS, with accurate evidence logs.

- Procurement & onboarding support:
Supporting security input to tenders and new-supplier onboarding by gathering artefacts, completing standard due-diligence sections and escalating issues to senior team members.

- Change enablement & development:
Providing proportionate security input to low/medium-risk changes; keeping skills current and progressing agreed training/certifications. Qualifications and training:
Working towards or holding a relevant security/IT qualification (e.g. Security, SSCP, Network) or equivalent practical experience. Commitment to ongoing professional development (training and certifications supported). Skills, knowledge and experience - Understanding and application of equality and diversity policies in the workplace.

- Experience in an information security or IT operations role (service desk, infrastructure, or similar) with exposure to security responsibilities.

- Good grasp of core security principles (least privilege, secure configuration, incident handling basics) and modern cloud/SaaS environments.

- Evidence of producing or following runbooks/procedures and maintaining assurance evidence.

- Experience supporting MI/metrics preparation (spreadsheets/dashboards) and maintaining clear records.

- Experience supporting security questionnaires/due diligence as part of procurement or supplier onboarding. Hays EA is a trading division of Hays Specialist Recruitment Limited and acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at