Cyber Essentials Analyst

Cyber Essentials Analyst

Help Organisations Strengthen Their Security and Achieve Compliance

The Role

• Lead customers through the full Cyber Essentials and Cyber Essentials Plus certification lifecycle.
• Conduct readiness assessments across the five Cyber Essentials control areas: 
  • Firewalls
  • Secure Configuration
  • User Access Control
  • Malware Protection
  • Patch Management
• Identify compliance gaps and provide clear, risk-based remediation recommendations.
• Support customers with configuration changes, policy enablement, security baselines, and certification readiness activities.
• Coordinate remediation activities with internal Support and Engineering teams where specialist expertise is required.
• Prepare and maintain evidence packs, technical documentation, screenshots, and supporting materials for IASME submissions.
• Provide clear, practical guidance to technical and non-technical stakeholders.
• Support Cyber Essentials Plus audits and coordinate the resolution of any findings.
• Stay up to date with changes to Cyber Essentials requirements, security best practices, and the evolving threat landscape.
• Identify opportunities for customers to further strengthen their security posture.
• Contribute to process improvements, templates, documentation, and service delivery methodologies.
• Support the development of automated compliance and reporting capabilities.
• Work with internal teams to identify opportunities for customers to benefit from additional security services.

What We're Looking For

• Experience working in IT Infrastructure, Systems Administration, Cyber Security, Managed Services, or a similar technical environment.
• Strong knowledge of Microsoft 365 and Azure administration, including tenant security and conditional access.
• Experience working with endpoint management and patching solutions such as Microsoft Intune, Datto RMM, or similar platforms.
• Good understanding of network architecture, firewall technologies, and security controls.
• Experience with endpoint protection technologies such as Microsoft Defender, Bitdefender, or equivalent solutions.
• Understanding of vulnerability management and security remediation processes.
• Knowledge of security hardening standards and security best practices.
• Excellent written and verbal communication skills.
• Ability to explain technical security concepts in a clear and accessible way.
• Strong organisational skills with excellent attention to detail and documentation standards.
• Ability to manage multiple customer engagements and competing priorities.
• Self-motivated with the ability to work independently and collaboratively.
• Willingness to undertake occasional customer site visits.

• Previous experience supporting or delivering Cyber Essentials and Cyber Essentials Plus assessments.
• Knowledge of security frameworks such as ISO 27001, SOC 2, or the NCSC Cyber Assessment Framework (CAF).
• Relevant certifications such as: 
  • CompTIA Security+
  • Microsoft SC-900
  • IASME Cyber Essentials Practitioner
• Experience using ITSM platforms such as ServiceNow or similar ticketing systems.
• Familiarity with documentation and configuration management platforms such as IT Glue or Hudu.
• Understanding of cyber risk assessment and risk management methodologies.
• Exposure to Security Operations Centres (SOC), SIEM platforms, MDR, EDR, or XDR services.
• Knowledge of security automation and compliance monitoring tools.