IT Security Analyst

Senior IT Security Analyst Influential UK Financial Services Organisation | Hybrid Working Are you an experienced Security Analyst looking to play a hands-on role in strengthening security controls across a modern Microsoft technology estate? We're supporting an influential UK Financial Services organisation as they continue to invest in their Information Security capability. This role will focus on Microsoft security, identity and data protection technologies, helping to safeguard critical business systems, data and users while driving continuous improvement across the security landscape. Working closely with senior security stakeholders, you'll take ownership of key security controls, identify opportunities for enhancement, support incident response activities and help embed a strong security culture across the organisation. Key Responsibilities * Manage and enhance Microsoft security, compliance and data protection controls across the organisation. * Lead the administration and continuous improvement of Microsoft Purview, Data Loss Prevention (DLP) and information protection capabilities. * Support identity and access management activities, including role-based access control (RBAC), access reviews and Joiner-Mover-Leaver processes. * Identify security risks, vulnerabilities and control gaps, driving remediation activity where required. * Support security incident investigations, coordination, reporting and escalation. * Assist with audits, compliance activities and the maintenance of security control evidence. * Produce meaningful security reporting and insights for stakeholders. * Collaborate with internal teams, managed service providers and third-party suppliers to improve security processes and controls. * Contribute to security awareness initiatives and promote best practice across the business. * Stay abreast of emerging cyber threats, technologies and industry trends to strengthen organisational resilience. Essential Experience * Experience within Information Security, Cyber Security or a closely related discipline. * Strong understanding of Microsoft technologies including Microsoft Entra ID, Microsoft 365, Azure and Active Directory. * Experience implementing, operating or enhancing security controls across areas such as: * Identity & Access Management (IAM) * Identity Governance * Data Loss Prevention (DLP) * Information Protection * Security Risk Management * Experience working with Role-Based Access Controls (RBAC) and access governance processes. * Familiarity with security frameworks and standards such as ISO 27001, NIST or Cyber Essentials Plus. * Comfortable engaging with a broad range of technical and non-technical stakeholders. * Strong understanding of data protection principles and their application within security controls. Desirable Experience * Experience within Financial Services or another regulated environment. * Knowledge of UK GDPR and wider data protection requirements. * Experience with Microsoft Purview and/or Entra Identity Governance. * Experience facilitating workshops, reviews or security-focused stakeholder sessions. * Experience working alongside managed service providers or external security partners. Key Skills * Strong communication and stakeholder management skills. * Ability to influence and challenge constructively. * Analytical approach to problem solving and risk assessment. * Excellent organisation and attention to detail. * Self-motivated with the ability to manage priorities independently. * Pragmatic, risk-based mindset with a focus on delivering practical security outcomes. What We're Looking For Successful candidates are likely to demonstrate experience across security projects, identity governance, access controls, supplier security reviews, risk management or broader cyber security initiatives. Exposure to cloud-based environments and Microsoft security technologies will be particularly valuable. This is an excellent opportunity to join a growing security function where you'll have genuine influence over security controls, risk reduction initiatives and the future direction of the organisation's Microsoft security capabilities.