SOC Analyst

Senior Security Operations Analyst - Permanent - Hybrid London - up to £65k

Reporting To:

Security Operations Lead

About the Client

Our client is a leading organisation protecting the IP, data, and digital assets of thousands of professionals and enterprise partners.

Role Overview

As a Senior Security Operations Analyst, you will play a pivotal role in safeguarding critical enterprise data, employee environments, and stakeholder systems. You will lead cross‑functional security initiatives, drive incident response, and expand existing security tooling integrations across key domains including SOC, DLP, IAM, and Vulnerability Management. This role also serves as operational deputy to the Security Operations Lead during incident response scenarios.

Key Responsibilities

• Identity Governance & Privileged Access (IGA / PAM / EPM): Define functional specifications for IGA/PAM solutions, ensure platform health and support, and oversee day‑to‑day operational IAM processes (including Okta, Azure AD, SailPoint, and EPM rollouts).


• Data Loss Prevention (DLP): Maintain and support DLP controls, establish business functional specifications, and manage day‑to‑day DLP oversight.


• Security Operations & Incident Response: Respond to SOC escalations, oversee enterprise vulnerability remediation, and serve as deputy for the Security Operations Lead during active incidents.


• Security Change Management: Assess security risk postures regarding organisational changes and document configuration decisions to prevent compatibility or access friction.


• Training & Awareness: Help run internal security awareness programmes, phishing simulations, and general cybersecurity best‑practice education.


• Stakeholder & Vendor Collaboration: Build strong relationships across operational IT, Application Support, Managed Service Providers (MSPs), and Data Governance/Privacy teams.

Key Requirements & Qualifications

• Education: Bachelor’s degree (or equivalent experience) in a technical discipline.


• Certifications (Preferred): One or more security credentials (CISSP, CISM, GIAC/GSEC, CIPP/E, CIPM) or IT governance/IAM certifications (ITIL, Microsoft AD).


• Technical Expertise: Hands‑on experience with DLP tools, Data Classification, Access Management/Federation systems (Okta, Azure, SailPoint/Idera), and Endpoint Privilege Management (EPM).


• Privacy & Governance: Deep understanding of data privacy guidance, including structured/unstructured personal data handling and deletion processes.


• Stakeholder Management: Proven track record of interfacing with senior leadership, internal technical teams, and external IT partners.

Core Competencies

• Pragmatic Decision‑Making: Balances short‑ and long‑term implications to support overall risk posture; takes full ownership of security outcomes.


• Solution‑Oriented Delivery: Constructively challenges legacy processes to introduce modern best practices and resolve complex technical blockers.


• Translates Complexity: Able to synthesize technical threats and compliance data into actionable advice for non‑technical business partners.