Senior Information Security Analyst

Location: Remote, must be located permanently in the UK. Contract: Permanent – 35 hours per week.

29 days annual leave PLUS bank holidays, with up to 5 additional days for continuous service and option to buy or sell leave. Gain professional qualifications and excellent training/development opportunities. Flexible maternity, adoption, and paternity packages. Pension with up to 7% employer contribution with included life assurance cover. Blue Light Card eligibility with 15,000 national retailer's discounts.

Why Action for Children? Working here is more than a job. Everyone in the Action for Children family is passionate about protecting and supporting children. It is the sense of purpose that drives us every single day. Because we know that, when we work together, we can make a huge difference to bring lasting improvements to vulnerable children's lives.

A bit about the role: We are looking for a highly motivated, dynamic Senior Information Security Analyst on a full‑time permanent contract reporting to the Head of Information Security. You will be instrumental in providing frontline expertise to run day‑to‑day information security controls, lead technical response to incidents, and deliver agreed improvements that protect Action for Children’s people, data and services.

How you'll help to create brighter futures:

• Leading first response to significant security events, to include coordinating stakeholders and suppliers.
• Operating and improving preventative and detective controls through assurance triage quality and timely resolution.
• Coordinating identification and remediation with Technology teams and to maintain secure configuration baselines and tracking exceptions to closure.
• Promoting authentication and access practices, including joiner/mover/leaver and privileged‑access safeguards.
• Front‑line point of contact for higher‑risk suppliers/services.
• Designing and delivering targeted awareness activity.
• Maintaining accurate records, metrics and artefacts.
• Authoring and maintaining clear operating procedures/playbooks; streamlining or automating repetitive tasks.
• Lead responsibility for the monthly and quarterly security MI for the function.

Let's talk about you:

• Relevant security qualification (e.g. Security+, SSCP, CySA+, CISSP, GCIH) or equivalent professional experience.
• Demonstrable experience in security operations within a live service environment, including working with managed detection/response partners.
• Demonstrable incident response leadership of calm execution.
• Practical knowledge of vulnerability, configuration and access management in modern cloud/SaaS environments.
• Experience producing and maintaining policies, standards, runbooks and assurance evidence.
• Proven track record of process improvement/automation with measurable service benefits.
• MI/KPI experience: producing senior‑audience packs, explaining trends and recommending actions.

Please see the Job Description for the full list of accountabilities and requirements.

Diversity, equality, and inclusion: At Action for Children, we're dedicated to building a diverse, inclusive, and authentic workplace. We actively encourage applications from Black, Asian & Minority Ethnic, and disabled candidates as they are under‑represented within Action for Children. We want to take deliberate and purposeful action to ensure equal opportunity to all groups in society and for Action for Children.