Cyber Essentials Analyst
Location: Hybrid / Manchester
Salary: Competitive
Contract: Permanent
Help Organisations Strengthen Their Security and Achieve Compliance
Focus Group is looking for a customer-focused Cyber Essentials Analyst to join our growing Managed Security Services team. This is an excellent opportunity for a security professional with a strong technical background and a passion for helping customers improve their cyber security posture.
As a Cyber Essentials Analyst, you'll work directly with organisations across a variety of sectors, guiding them through the complete Cyber Essentials (CE) and Cyber Essentials Plus (CE+) certification journey. You'll assess environments, identify compliance gaps, recommend practical improvements, and support customers in achieving and maintaining certification against UK Government-backed security standards.
This role offers the perfect blend of technical security expertise, consultancy, and customer engagement, making it ideal for someone who enjoys solving problems and building trusted relationships.
The Role
Working closely with customers, internal engineering teams, service delivery teams, and external auditors, you'll provide expert guidance throughout the Cyber Essentials certification process. You'll help organisations understand security requirements, implement necessary controls, and improve their overall security posture beyond basic compliance.
You'll play a key role in expanding Focus Group's cyber assurance services while helping customers reduce risk and strengthen their security foundations.
Key Responsibilities
- Lead customers through the full Cyber Essentials and Cyber Essentials Plus certification lifecycle.
- Conduct readiness assessments across the five Cyber Essentials control areas:
- Firewalls
- Secure Configuration
- User Access Control
- Malware Protection
- Patch Management
- Identify compliance gaps and provide clear, risk-based remediation recommendations.
- Support customers with configuration changes, policy enablement, security baselines, and certification readiness activities.
- Coordinate remediation activities with internal Support and Engineering teams where specialist expertise is required.
- Prepare and maintain evidence packs, technical documentation, screenshots, and supporting materials for IASME submissions.
- Provide clear, practical guidance to technical and non-technical stakeholders.
- Support Cyber Essentials Plus audits and coordinate the resolution of any findings.
- Stay up to date with changes to Cyber Essentials requirements, security best practices, and the evolving threat landscape.
- Identify opportunities for customers to further strengthen their security posture.
- Contribute to process improvements, templates, documentation, and service delivery methodologies.
- Support the development of automated compliance and reporting capabilities.
- Work with internal teams to identify opportunities for customers to benefit from additional security services.
What We're Looking For
Essential Skills & Experience
- Experience working in IT Infrastructure, Systems Administration, Cyber Security, Managed Services, or a similar technical environment.
- Strong knowledge of Microsoft 365 and Azure administration, including tenant security and conditional access.
- Experience working with endpoint management and patching solutions such as Microsoft Intune, Datto RMM, or similar platforms.
- Good understanding of network architecture, firewall technologies, and security controls.
- Experience with endpoint protection technologies such as Microsoft Defender, Bitdefender, or equivalent solutions.
- Understanding of vulnerability management and security remediation processes.
- Knowledge of security hardening standards and security best practices.
- Excellent written and verbal communication skills.
- Ability to explain technical security concepts in a clear and accessible way.
- Strong organisational skills with excellent attention to detail and documentation standards.
- Ability to manage multiple customer engagements and competing priorities.
- Self-motivated with the ability to work independently and collaboratively.
- Willingness to undertake occasional customer site visits.
Desirable Skills
- Previous experience supporting or delivering Cyber Essentials and Cyber Essentials Plus assessments.
- Knowledge of security frameworks such as ISO 27001, SOC 2, or the NCSC Cyber Assessment Framework (CAF).
- Relevant certifications such as:
- CompTIA Security+
- Microsoft SC-900
- IASME Cyber Essentials Practitioner
- Experience using ITSM platforms such as ServiceNow or similar ticketing systems.
- Familiarity with documentation and configuration management platforms such as IT Glue or Hudu.
- Understanding of cyber risk assessment and risk management methodologies.
- Exposure to Security Operations Centres (SOC), SIEM platforms, MDR, EDR, or XDR services.
- Knowledge of security automation and compliance monitoring tools.
- Holiday Allowance - 24 days + bank holidays + birthday leave.
- Hybrid working options - performance depending.
- Enhanced maternity, paternity and adoption leave.
- Paid volunteering day * regular charity events.
- Wider company benefits across health, financial wellbeing, Pension etc.
Internal job reference: Senior Associate
