Jobgether
Security Analyst (compliance and controls)
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Security Analyst (Compliance and Controls) - United Kingdom
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Analyst (compliance and controls) based in the United Kingdom.
This is a security-focused role responsible for strengthening compliance, controls, and incident response across a modern cloud infrastructure environment.
You will monitor and investigate security incidents while assessing their impact on the organization’s compliance posture.
A key part of the role will be identifying and remediating technical compliance violations and developing detections to prevent them from recurring.
You will work closely with Security Operations, Technology, Compliance, and Audit teams to maintain adherence to important regulatory and security standards.
The position combines hands-on security analysis with automation, documentation, reporting, and audit support.
You will have the opportunity to improve security processes and controls within a rapidly evolving, highly technical infrastructure environment.
This role is well suited to an analytical security professional who enjoys solving complex problems, improving controls, and taking ownership of security and compliance outcomes.
Accountabilities:
- Monitor, investigate, and respond to security incidents across SIEM, CSPM, and other enterprise security technologies.
- Assess the impact of security incidents on the organization’s compliance posture and remediate technical compliance violations.
- Identify gaps in security and compliance controls and implement appropriate remediation measures.
- Propose and develop detection mechanisms designed to identify compliance violations and emerging security risks.
- Create and maintain automation for security compliance activities and incident investigations using tools such as Logic Apps, PowerShell scripts, and Sentinel playbooks.
- Collaborate with internal and external auditors to collect, prepare, and validate evidence demonstrating continued adherence to compliance requirements.
- Provide clear reporting and documentation covering security incidents, investigations, remediation activities, and compliance requirements.
- Work closely with Technology, Security Operations, Compliance, and Audit teams to strengthen adherence to security and regulatory standards across the infrastructure.
- Support continuous improvement of security controls, monitoring capabilities, and compliance processes.
- Contribute to security investigations and ensure identified issues are tracked through to effective resolution.
- Help maintain appropriate documentation and evidence for frameworks and controls including SOX, DORA, GDPR, and SOC 2.
- Apply security and compliance best practices across cloud infrastructure and enterprise technology environments.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Requirements:
- 2+ years of hands-on experience working as a Security Analyst with enterprise security technologies such as SIEM, EDR, and CSPM.
- Practical experience with Microsoft Sentinel, including KQL queries, analytic rules, automation playbooks, and dashboards.
- Experience with Microsoft Entra ID, including identity protection, conditional access, and Privileged Identity Management (PIM).
- Experience with Microsoft Purview, including Data Loss Prevention (DLP), sensitivity labels, insider risk, and eDiscovery.
- Demonstrated experience working with internal and external auditors to provide and validate evidence for compliance controls in cloud environments.
- Experience supporting compliance requirements and controls related to frameworks or regulations such as SOX, DORA, GDPR, and SOC 2.
- Proven experience investigating and remediating security incidents.
- Solid understanding of identity and access management (IAM) lifecycle processes.
- Strong knowledge of SIEM and SOAR concepts and their application in security operations.
- Understanding of security compliance controls and frameworks, including NIST and other recognized industry standards.
- Intermediate written and spoken English proficiency.
- Strong analytical and problem-solving skills, with the ability to investigate complex security issues and determine appropriate remediation.
- Ability to collaborate effectively with security, technology, compliance, and audit stakeholders.
- Microsoft security certifications such as SC-200, SC-300, or SC-400 are advantageous.
- Experience with cloud security posture management and vulnerability management tools is a plus.
- Familiarity with DevOps practices for security automation, including Git and Azure DevOps, is beneficial.
- Familiarity with Endpoint Detection and Response (EDR) technologies is advantageous.
- Experience remediating compliance violations is a plus.
- Scripting or development experience with PowerShell, RESTful APIs, Microsoft Graph API, Python, or Bash is highly valued.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Benefits:
- Competitive compensation.
- Fully remote work opportunity within Europe, with the option to work from an office environment where available.
- Flexibility and significant ownership over your work.
- Career development and continuous learning opportunities.
- Opportunity to work on impactful projects within advanced AI and cloud infrastructure.
- International environment with highly skilled colleagues across multiple countries.
- Collaborative and innovative culture.
- Opportunity to work on complex security, compliance, and cloud infrastructure challenges.
- Fast-paced environment that encourages bold thinking, continuous improvement, and meaningful impact.
- Opportunity to contribute to the security foundations of a rapidly evolving technology platform.
How Jobgether Works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location