Cyber Security Analyst in Bath

Wealthtime is an award-winning investment platform that helps advisers deliver the best outcomes for their clients, bringing together smart technology and expert support. With over £12 billion in assets under administration and a growing team of more than 100 professionals, we’re building something truly exceptional. Our culture is driven by three core behaviours—Seek Opportunity, Nurture Each Other, and Simply Get Going—empowering our people to innovate, collaborate, and create meaningful impact every day.

The Cyber Security Analyst is responsible for helping us to secure our systems and protect our key stakeholders, IT infrastructure, information assets and business operations. Reporting to the Head of Information Security, the successful candidate will work with key business stakeholders, SOC, IT and 3rd party vendors, to ensure that we operate a robust Cyber Security infrastructure and ISO27001 ISMS that is highly effective in protecting the business, in line with our commitment to clients and our regulatory obligations.

Key Responsibilities

• Working with the Head of Information Security to develop policy and strategy in line with the group’s vision.
• Help implement security controls to protect systems, networks, applications, and customer data.
• Monitor security events and respond to cyber incidents, ensuring threats are detected, contained, and remediated.
• Oversee and monitor vulnerabilities and security patching, coordinating remediation with IT and business teams.
• Oversee and monitor cloud and on-premises environments, including Microsoft 365, Entra ID, servers, endpoints, and network infrastructure.
• Support regulatory and compliance requirements such as FCA, GDPR, ISO 27001, and other industry standards.
• Conduct security assessments and testing, including configuration reviews, penetration test remediation, and risk assessments.
• Provide security advice to projects and technology teams, ensuring secure‑by‑design principles are applied.
• Develop and improve security monitoring, automation, and detection capabilities to enhance cyber resilience.

About You

Essential Specialist Skills, Qualifications and Experience

• 3+ years' experience in a cyber security role.
• Experience with Microsoft 365, Entra ID, Purview, endpoint security, SIEM, and vulnerability management.
• Experience in incident response and security monitoring.
• Knowledge of ISO 27001, GDPR, and financial services regulatory requirements.
• Advanced security certifications such as CISSP, CISM, CCSP, GIAC, or equivalent.
• Experience conducting security assessments, technical reviews, and supporting audit activities.

Desirable

• Experience with cloud security, security automation, and security architecture.
• Knowledge of FCA, PRA, DORA, and cyber resilience requirements.
• Experience mentoring junior engineers or leading technical security projects.
• Experience working with SIEM, EDR, vulnerability management, and identity and access management solutions.
• Knowledge of Microsoft Purview, DLP policy creation and reporting.
• Knowledge of KQL and JSON for queries and automation.

Core Competencies

• Analytical & Problem‑Solving Skills: Ability to assess complex security issues and develop practical, risk-based solutions.
• Communication & Stakeholder Management: Ability to explain security risks and recommendations to both technical and non-technical audiences.
• Business Focus: The motivation and ability to always apply good financial practice and company procedures.
• Operational Excellence: Continually delivering and improving excellence for all clients and customers.
• Client and Customer Focus: Add value to client/customer, adhere to Treating Customers Fairly principles, and operate as a true business partner.
• Communication: Communicate clearly and concisely, tailoring content and style, with ability to make a positive impression on others.
• Expert Knowledge: Consistent application of professional or specialist knowledge and skills; takes opportunities to contribute to policy and best practice.
• Working with others: Working successfully with others and building a network of good relationships to achieve shared goals.
• Performance Focus: Demonstrate energy and enthusiasm, takes ownership, delivers results and improves personal performance.

Rewards & Benefits

• Competitive Compensation: We offer a competitive salary that reflects your skills and contributions.
• Hybrid Working: Enjoy the flexibility of a hybrid work model, balancing the comforts of home with the camaraderie of the office.
• Yearly Discretionary Bonus: Look forward to a yearly discretionary bonus as a token of appreciation for your dedication.
• Generous Holiday Package: You’ll receive 34 days of holiday per calendar year, including bank holidays. Plus, we offer the option to purchase or sell up to 5 additional days per year, tailoring your time off to suit your needs.
• Wellbeing at Heart: We understand the importance of your well‑being, which is why we offer a Wellbeing day, allowing you to take a break when you need it most.
• Professional Growth: We’re committed to your professional development and will support and encourage your career advancement.
• Comprehensive Health: You and your family's health is a priority for us. We provide a Private Medical scheme that can be extended to full family coverage.
• Financial Security: Prepare for your future with our Group contributory pension scheme.
• Travel with Ease: We offer interest‑free season ticket loans to help with travel costs.
• Giving Back: You can participate in our Wealthtime Foundation Day to support charitable activities.
• Opportunities for Growth: We actively promote internal progression, so your journey with us can take you from agent to team leader and beyond.
• Recognition Matters: Our excellent in the moment recognition scheme ensures your hard work is acknowledged and celebrated.

Wealthtime is an equal opportunities employer that places high value on a diverse and inclusive workplace. We recognise that people work in different ways, appreciate alternative viewpoints, celebrate individuality, and cultivate a culture where everyone can be their authentic selves at work.