Junior Information Security Analyst

- Provide hands-on support to run day-to-day information security activities - Assist with incident response and deliver agreed improvements to protect people, data, and services - Carry out routine security tasks and checks; log, triage, and progress issues to agreed timescales - Support the response to security events (e.g. records/evidence, coordination, follow-up actions) under the direction of senior team members - Assist with the identification and remediation tracking with Technology teams; help maintain secure configuration baselines - Help maintain good access practices, including joiner/mover/leaver processing and periodic reviews - Support practical measures that prevent accidental loss or unauthorized disclosure of information, in partnership with Information Governance/DPO - Help collect and file security artifacts for higher-risk suppliers/services and track agreed improvements with the team - Assist with phishing simulations, targeted learning, and provide simple, action-focused guidance for staff; track completion and handle queries - Keep accurate records, metrics, and artifacts to support external assurance and internal audit activities - Maintain clear operating procedures/playbooks; suggest and implement small improvements or automation to reduce manual work - Track, collate and provide monthly and quarterly security statistics (e.g. incidents, awareness completion, remediation progress) to the HoIS, with accurate evidence logs - Support security input to tenders and new-supplier onboarding by gathering artifacts, completing standard due-diligence sections, and escalating issues to senior team members - Provide proportionate security input to low/medium-risk changes; keep skills current and progress agreed training/certifications