Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Information Security Analyst role.
Rezi rewrites your resume against Zinc's job description. Free.
Tailor your resume to this Information Security Analyst role.
Rezi rewrites your resume against Zinc's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Information Security Analyst posting at Zinc — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Information Security Analyst posting at Zinc — free, in seconds.
About the Role
This is an exciting opportunity to join Zinc's Information Security team at a pivotal point in its journey. As an Information Security Analyst, you'll play a key role in shaping and strengthening how we approach security across the business, taking ownership of meaningful projects that will have a real impact on our people, products and technology. You'll have the opportunity to drive improvements, introduce new security practices and work closely with teams across the business to make security a shared priority. It's a hands-on role where you'll have plenty of scope to use your technical expertise, influence how things are done and help build a stronger, more resilient security environment as Zinc continues to grow.
Responsibilities
- Drive the Security Roadmap – take the lead on delivering our 2-year security roadmap, covering everything from workplace identity and cyber attack protection to workforce security, ecosystem resilience and secure software development.
- Strengthen Our Security Standards – tackle outstanding audit findings and recommendations, putting the right improvements in place and helping us stay on top of compliance deadlines.
- Bring Teams Along on the Journey – work closely with engineering and other teams across the business to drive security improvements, influence decisions and get everyone moving in the same direction.
- Get Hands-On – roll up your sleeves and get stuck into the technical work, from implementing new systems to rolling out important security controls.
- Build Stronger Identity & Access Management – design, implement or mature IAM controls, including Multi-Factor Authentication (MFA), Joiner-Mover-Leaver (JML) processes and Role-Based Access Control (RBAC).
Requirements
- Hands-on experience with Google Workspace – practical experience managing and securing Google Workspace environments.
- Experience working with AWS environments and their security.
- Understanding of Mobile Device Management (MDM) and endpoint security.
- Experience using Endpoint Detection and Response (EDR) tools to monitor, detect and respond to threats.
- Experience identifying potential threats, assessing vulnerabilities and helping to strengthen security across systems.
- Experience with OWASP SAMM / Secure SDLC maturity models – familiarity with application security frameworks and improving security practices throughout the software development lifecycle.
- Experience implementing Privileged Identity Management (PIM) or Privileged Access Management (PAM) solutions.
- Ability to combine strong technical knowledge with the ability to bring people along with them.
- Ability to work collaboratively across different teams and drive security initiatives throughout the business.
- Confidence in influencing and gaining buy-in from teams, particularly engineering, even when they don't report directly to you.
- Ability to manage competing priorities, balance longer-term security projects with urgent demands and keep things moving.
- Able to explain technical concepts and security risks in a clear, accessible way to both technical and non-technical stakeholders.
- Able to balance the ideal security approach with practical business needs, finding solutions that strengthen security without slowing down delivery.
Skills
- Google Workspace
- AWS
- MDM (Mobile Device Management)
- EDR (Endpoint Detection and Response)
- Threat Intelligence
- Vulnerability Management
- OWASP SAMM / Secure SDLC maturity models
- PIM / PAM Implementation
- Cross-functional Leadership
- Influencing Without Authority
- Prioritisation Under Pressure
- Clear Communication
- Pragmatism
Location
- Zinc - London
Work Type
- Full Time
Experience Level
- Mid-level
Education Level
- Industry Certifications – qualifications such as CISSP, CISM or CRISC.
Salary/Compensations
- £45,000 - £53,000 / year
Benefits
- 24 days holiday + Bank Holidays + your birthday off
- £1200 annual benefits allowance (ThanksBen, from month 2)
- Early finish Fridays (16:00)
- Yearly company retreat abroad
- 30 days to Work from anywhere
- Enhanced Maternity, Paternity, and Adoption Leave (13 weeks full pay, 17 weeks half pay, then SMP for maternity, 1 month full pay for paternity/adoption)
- Statutory pension with NEST (3% employer, 5% employee)
- Zinc shares, issued through the EMI Scheme
- Unlimited access to Spill Therapy
- Company socials, quarterly team socials
- Free Monday lunches
- Nursery workplace benefit scheme (Yellownest)
- Option to lease an electric car through Electric Car Scheme
- Celebrated Zinc anniversaries
About the Company
- Zinc is a company at a pivotal point in its journey, focused on strengthening its information security across the business.