IT Security Analyst

• Job_application_guidance
• IT_Security_Analyst_-OT

IT Security Analyst 

Permanent Position (37 hours per week) 

OneTeam – Band 8 – £41,177 - £45,529 

Location: Brentwood Borough Council and Rochford District Council 

Closing Date for accepting applications: 23:59pm Sunday, 1st November 2026 

Interviews will be held on the 11th and 12th November 2026 

(Starting salary dependent upon skills and qualifications, progression subject to satisfactory performance) 

Do you want to play a key role in protecting the information, systems and services of two ambitious councils? Are you passionate about cyber security, risk management and building resilient digital services? Do you have the technical knowledge and practical experience to identify threats, respond to incidents and help colleagues work securely?  

Brentwood Borough Council and Rochford District Council have formed a strategic partnership, sharing knowledge, experience and projects for the benefit of both councils. We are seeking a motivated and knowledgeable IT Security Analyst to join our Digital, Data and Technology team.  

As IT Security Analyst, you will help safeguard the Councils’ information assets, technology services and users. You will undertake operational cyber security activities, support the development of our security governance arrangements and provide practical advice to projects, services and colleagues across both councils.  

You will  

• Monitor, investigate and respond to cyber security alerts, threats and incidents.  

• Maintain incident response plans and playbooks, coordinating containment, recovery and post-incident reviews.  

• Lead vulnerability management activities and track remediation actions through to completion.  

• Maintain and improve information security policies, standards and procedures.  

• Support cyber risk management and maintain the security risk register.  

• Assist with Cyber Essentials Plus, audits and wider security assurance activities.  

• Provide secure-by-design advice for new systems, digital projects and cloud services.  

• Advise on identity and access management, Conditional Access, multi-factor authentication, privileged access, endpoint protection, encryption and network security.  

• Review supplier security arrangements and assess technical security evidence.  

• Support Data Protection Impact Assessments and compliance with UK GDPR and the Data Protection Act 2018.  

• Deliver security awareness activities and phishing simulation programmes.  

• Support ICT disaster recovery, business continuity and resilience testing.  

About you  

You will have practical experience of cyber security operations, including incident response, vulnerability management and security monitoring. You will understand cyber security risks and controls and be able to explain technical issues clearly to colleagues, suppliers and senior stakeholders.  

You will have knowledge or experience of:  

• Microsoft 365, Azure and Entra ID security.  

• Security monitoring, endpoint protection and SIEM technologies.  

• Identity and access management, MFA and Conditional Access.  

• Cyber risk assessment and security risk registers.  

• Information security frameworks and standards.  

• UK GDPR, information governance and Data Protection Impact Assessments.  

• Cloud security and secure system configuration.  

• Supplier assurance and third-party security risk.  

• Cyber security awareness and user education.  

Experience of local government or another public sector environment, together with knowledge of Cyber Essentials Plus, the NCSC Cyber Assessment Framework or ISO 27001, would be advantageous.  

You will be collaborative, organised and able to balance security requirements with the practical needs of council services. You will promote a positive and pragmatic security culture, helping colleagues to understand that effective cyber security enables safe and reliable public services.  

Working arrangements  

We offer hybrid working, but the role operates across both councils and you will be expected to work regularly from the Brentwood and Rochford offices. The role may occasionally require work outside normal hours to support the response to significant cyber security incidents.  

Why join us?  

You will be part of a forward-thinking Digital, Data and Technology team working across two councils. This is an opportunity to influence our approach to cyber security, improve organisational resilience and protect services that make a real difference to residents and employees.  

We offer flexible and agile working, a supportive working environment, opportunities for professional development and a commitment to equality of opportunity.  

How to apply  

To apply for this vacancy using our quick and easy online application method, please use the following link:  

For an informal discussion about the role, please contact:  

Tim Huggins  

Corporate Manager, IT & Digital  

Email: [email removed]  

Telephone: [phone removed]  

Or  

Cole Brace

Technical Delivery Manager

Email: [email removed]  

Brentwood Borough Council and Rochford District Council are committed to safeguarding and promoting the welfare of children and adults, and expect all employees, contractors, and volunteers to share this commitment. We welcome applications from all sections of the community. People with disabilities will be offered an interview where they meet the Essential Criteria on the Person Specification.