Security Operations Analyst

You'll join the CISO office, a team of five informal and ambitious colleagues working on organization-wide security topics. You'll report to the Technical Information Security Officer (TISO), and collaborate closely with internal technology teams, control owners, and the wider CISO office. In this role, you'll support the day-to-day operational security of the organization.

You'll help track vulnerabilities through identification and reporting to remediation, contribute to incident triage and investigation, and review monitoring outputs to spot unusual activity or control gaps. You'll also manage the security exception process and follow up on findings in our key security posture platforms. It's a varied operational role where keeping clear records, managing recurring tasks, and prioritizing risk all come together.

• Support and coordinate the vulnerability and patch management process, tracking findings and following up on remediation within agreed timelines.
• Contribute to incident management by supporting triage, investigation, escalation, documentation, and follow-up of security incidents and operational events.
• Monitor and review security logging and monitoring outputs, perform operational follow-up in platforms such as Wiz and BitSight, and route findings to the right owners through to closure.
• Manage and maintain the security exception management process, including registration, risk review, stakeholder follow-up, and periodic reassessment.
• Support overall security hygiene by following up on baseline control weaknesses, configuration issues, outdated assets, and access reviews.

What they ask You work in a proactive way, take ownership of issues until they're resolved, and communicate clearly with both technical and non-technical stakeholders. You enjoy structured operational work and stay curious about new tools and how AI can improve day-to-day operations.

• 2+ years of hands-on experience in security operations, IT security, or equivalent IT function.
• Familiarity with vulnerability management, patching, logging and monitoring (ideally in a SOC or NOC environment), and incident classification and response workflows.
• Solid understanding of core IT infrastructure, networking, and information security concepts (e.g., firewalls, identity management, encryption, access control).
• Basic scripting in Python or PowerShell is a strong plus, as are security certificates such as Security+, ISC2 CC, or equivalent.
• Strong problem-solving mindset, able to break down complex problems and translate this to actionable insights for both technical and non-technical stakeholders.