Information Security Analyst – Cardiff

An Information Security Analyst within NHS Shared Business Services assesses risks, implements security controls, and supports cyber security activities across technical environments. They provide advice on infrastructure, networks, and cloud services, identifying security gaps and recommending improvements. The role involves analysing vulnerabilities, supporting incident response, and evaluating emerging threats while collaborating with technical teams. Candidates should have a strong foundation in cyber security principles, experience in risk assessment and security controls, and knowledge of frameworks like ISO 27001 and NIST. Effective communication skills and a proactive learning attitude are essential for success in this role, which supports NHS digital security initiatives.