Cyber Essentials Analyst

The Role

• Guide customers through the full Cyber Essentials and Cyber Essentials Plus certification lifecycle
• Conduct readiness assessments across the five Cyber Essentials control areas 
• Identify compliance gaps, vulnerabilities and areas of non-conformance within customer environments
• Provide clear recommendations and remediation plans aligned to IASME and NCSC requirements
• Perform light remediation activities including configuration changes, policy updates, security hardening and patch validation
• Coordinate with internal Engineering and Support teams where specialist remediation activities are required
• Prepare comprehensive evidence packs, supporting documentation and technical records for assessor review
• Support customers through Cyber Essentials Plus audit preparation and testing activities
• Explain security risks, technical concepts and compliance requirements in clear, accessible language for non-technical stakeholders
• Build trusted relationships with customers and act as a security advisor throughout the certification process
• Ensure all customer assessments, documentation and recommendations are completed accurately and to a high standard
• Maintain awareness of evolving Cyber Essentials requirements, IASME updates and NCSC guidance
• Identify opportunities to further improve customer security maturity beyond minimum compliance requirements
• Support the development of internal cybersecurity processes, templates and delivery methodologies
• Collaborate with automation and development teams to improve compliance assessment and reporting capabilities
• Recognise opportunities for additional security services and collaborate with Sales and Pre-Sales teams where appropriate

Essential

• Experience working within IT Infrastructure, Systems Administration, Cyber Security Operations, Technical Support or Managed Services environments
• Strong understanding of Microsoft 365 administration and security capabilities
• Experience administering Microsoft Azure environments, including identity and access controls
• Knowledge of endpoint security and device management platforms such as Microsoft Intune, Datto RMM or similar solutions
• Understanding of network infrastructure, firewall technologies and perimeter security controls
• Experience working with endpoint protection platforms such as Microsoft Defender, Bitdefender or equivalent security solutions
• Understanding of patch management processes and vulnerability remediation practices
• Knowledge of security hardening principles, security baselines and cyber security best practices
• Strong understanding of the practical controls required to meet Cyber Essentials requirements
• Excellent written and verbal communication skills
• Ability to explain technical security concepts to non-technical audiences
• Strong customer engagement and stakeholder management skills
• Excellent organisational skills with strong attention to detail and documentation standards
• Ability to manage multiple customer engagements simultaneously
• Self-motivated and able to work independently while collaborating effectively within a wider team
• Willingness to travel for occasional customer site visits

Desirable

• Previous experience supporting Cyber Essentials or Cyber Essentials Plus assessments and submissions
• Knowledge of broader compliance frameworks including ISO 27001, SOC 2 and the NCSC Cyber Assessment Framework (CAF)
• Relevant certifications such as: 
  • CompTIA Security+
  • Microsoft SC-900
  • IASME Cyber Essentials Practitioner
  • Microsoft Security certifications
• Experience working with ITSM platforms such as ServiceNow or similar service management tools
• Experience using documentation platforms such as IT Glue, Hudu or equivalent solutions
• Understanding of cyber security risk management methodologies
• Exposure to Security Operations Centre (SOC) environments
• Experience with SIEM, MDR, EDR or XDR technologies
• Familiarity with compliance automation and security orchestration platforms