Description

The analyst will be responsible for assuring that services are implemented and operated in accordance with Group Security and local business‑unit requirements. This includes supporting the development, implementation, and enforcement of security policies and standards, and guaranteeing alignment with regulatory requirements and industry standards.

Key duties involve identifying, assessing, and managing information‑security risks, as well as assisting teams in applying mitigation strategies. The role also delivers security awareness and training, conducts phishing simulations, and provides advice on best practices to management and project teams.

Additional responsibilities cover identity‑governance activities such as access reviews, supporting compliance during project delivery, performing third‑party risk assessments, and liaising with vendors on security compliance. The analyst will also carry out security audits, assessments, and reporting to close gaps in the organization’s security posture.

• Ensure services are implemented and operated per Group Security and local BU requirements.
• Support development, implementation, and enforcement of security policies and standards, ensuring regulatory compliance.
• Identify, assess, and manage information security risks and assist teams with mitigation strategies.
• Deliver security awareness training, conduct phishing simulations, and advise on best practices.
• Perform identity governance activities such as access reviews and compliance support.
• Provide project security support to ensure compliance with laws, regulations, and industry standards.
• Conduct third‑party risk assessments and liaise with vendors on security compliance.
• Carry out security audits, assessments, and reporting to address posture gaps.

Requirements

We are looking for candidates with at least two years of experience in risk, security, or IT, excellent interpersonal and communication skills, and strong analytical abilities. The ideal person can quickly adopt new technical skills, has a good awareness of cloud environments—preferably Microsoft Azure—and understands SaaS, PaaS, and IaaS deployments. Familiarity with Cyber Essentials, PCI DSS, ISO 27000, GRC processes, documentation, and report creation is essential, as is a degree in a Business or IT discipline or equivalent experience.

• Minimum 2 years’ experience in risk, security, or IT with strong communication and analytical skills.
• Ability to work with cloud environments (preferably Microsoft Azure) and understand SaaS, PaaS, IaaS.
• Knowledge of Cyber Essentials, PCI DSS, ISO 27000, and GRC processes.
• Experience in documentation, process writing, and creating management reports.
• Degree in Business/IT or equivalent professional experience; occasional travel required.

Benefits

In return, Stark UK offers a competitive base salary, discretionary bonus, retirement savings plan, life assurance, and enhanced parental leave. Employees also enjoy a wide range of voluntary benefits such as holiday buying, discounted gym memberships, car salary sacrifice, Cycle2Work, Benenden Healthcare, and access to health and wellbeing services including online GP appointments and mental‑health support via WorkPerks.

Why choose us? We are unwavering in delivering outstanding products and service, provide a supportive environment that prioritises growth, and embrace listening and learning with our colleagues. Professional development is a core focus, with apprenticeships, training, and mentoring programs that enable career progression, alongside flexible working hours and a hybrid model to support work‑life balance.

• Competitive salary, discretionary bonus, pension scheme, life assurance, and enhanced parental leave.
• Access to health and wellbeing services, voluntary benefits, and WorkPerks discounts.
• Flexible working hours and hybrid work model to support work‑life balance.
• Opportunities for professional development, training, mentoring, and career progression.

Training + Development

Interview process

Visa Sponsorship

Security clearance