About Us
At Compass Community, we are committed to providing exceptional services that transform lives. Our work spans across care, education, and therapeutic services, supporting vulnerable children and young people throughout the UK. As part of our continued growth and dedication to ensuring a secure and resilient digital environment, we are looking for an experienced Information Security Engineer / Analyst to join our team.
The Role
As an Information Security Engineer / Analyst, you will play a crucial role in protecting our enterprise applications, data, and infrastructure. This hands-on role will require technical expertise in cybersecurity practices, security administration, vulnerability assessments, and incident response. Reporting to the Head of IT, you will work across teams to ensure security best practices are embedded throughout our operations.
Key Responsibilities
- Perform security reviews of application architecture, source code, and third-party integrations.
- Conduct secure SDLC assessments and collaborate on secure coding practices.
- Use tools to identify application vulnerabilities and lead remediation efforts.
- Manage and configure security tools (e.g., firewalls, SIEM, IDS/IPS, endpoint protection).
- Review and monitor user access and identity management controls.
- Perform internal and external penetration tests and regular vulnerability scans.
- Monitor systems and networks for threats and respond to security incidents.
- Lead root cause analyses and maintain incident response procedures.
- Recommend improvements to enhance security posture and promote a security-first culture.
- Conduct security awareness training and ensure compliance with best practices.
- Provide monthly information security reports and maintain documentation.
Skills & Experience
Essential
- 3–5+ years of experience in cybersecurity or information security engineering/analysis.
- Bachelor's degree in Computer Science, Information Security, or equivalent experience.
- Knowledge of frameworks such as MITRE ATT&CK, NIST, ISO 27001, Cyber Essentials+.
- Experience with tools like Nessus, Qualys, SIEM, EDR, DLP, VPNs, and firewalls.
- Familiarity with network protocols (TCP/IP, DNS, HTTP, SSH) and network segmentation.
- Understanding of Zero Trust models and cloud-native security practices.
- Experience in identity access management (Azure AD, MFA, SSO, RBAC).
- Proficient in log analysis, threat detection, and incident response.
- Strong stakeholder engagement and communication skills.
- Relevant certifications (e.g., CEH, OSCP, CISSP, Security+, GSEC) are a plus.
Why Join Compass Community?
- Play a direct role in improving services that support vulnerable children and families.
- Be part of a forward-thinking digital team that values innovation, efficiency, and social impact.
- Competitive salary and benefits package.
- Opportunities for personal growth, training, and professional development.
- Flexible, supportive working environment.
Ready to use your expertise to support vulnerable children and families through technology?
We’d love to hear from you. Apply now or contact us at [[email protected]] for a confidential discussion.
IND03