ICT Security Analyst

Job Description

ICT Security Analyst
Daily rate: £19.32 per hour PAYE inside IR35
Location: Milton Keynes Civic Offices
Contract: 3 months
Working hours: 37 per week, office based

Purpose of the Role:
\n Opus People Solutions are recruiting on behalf of Milton Keynes Council for an ICT Security Analyst to join our ICT service at Milton Keynes City Council. The ICT Security team protects the council's systems, data and digital services so the council can continue to operate securely and reliably for the people of Milton Keynes. The team sets and maintains security policies, standards and guidance, manages cyber risk, and works across council services to make sure security is built into day-to-day operations, projects and technology change.

\n The team monitors for threats and weaknesses, investigates incidents, leads response and recovery when issues arise, and helps strengthen resilience through planning, training, awareness and continual improvement. It also supports compliance with recognised frameworks, works with partners and suppliers to improve secure delivery, and helps the council adopt modern technologies in a safe, controlled and responsible way.

\n By protecting information and reducing disruption, the Security team helps Milton Keynes City Council remain resilient, trusted and able to deliver essential services across more than 200 council services. You'll help us protect vital systems, reduce cyber risk, respond to incidents and give practical advice that supports colleagues right across the organisation.
Key deliverables will include:

\n

\n
• Proactively monitor and protect ICT services against cyber threats and vulnerabilities ensuring adherence to appropriate Cyber Security frameworks. Maintain awareness of emerging threats, threat intelligence, standards and frameworks to inform defence actions and improvements.
\n
• Monitor, triage and investigate security alerts/reports. Analyse security event data, including end-user reports, to identify incidents and support effective response and remediation.
\n
• Identify, assess and prioritise security risks (current and emerging), evaluating impact and likelihood. Investigate, monitor, and audit system practices to ensure services and configuration items meet cyber security policies and baseline standards. Identify and document vulnerabilities, analyse trends, and present findings with recommendations. Develop, implement and track mitigation plans in collaboration with stakeholders.
\n
• Lead the response to ICT security incidents, ensuring containment, eradication and recovery activities are carried out in accordance with established incident response plans.
\n
• To deliver and assist in the delivery of projects in accordance with user specifications and timetables. Work closely with council services on project work, providing expertise on security impact, including risk, cost and deterrent. Understand security features of bespoke systems within MKCC.
\n
• Collaborate effectively with colleagues, suppliers, and partners to strengthen security controls, enhance security posture, and support organisational objectives. Acting as a subject matter expert for ICT security across the council, including the installation, maintenance, upgrading and optimisation of MKCC systems.
\n
• Develop and deliver cyber security awareness and guidance to colleagues, promoting secure behaviours and reducing organisational risk.
\n
• Collaborate with and act as cover for the Identity and Access administrator.
\n
• Produce regular reporting on security incidents, risks, and trends, providing insights and recommendations to strengthen organisational security posture.
\n
• Stay informed on Microsoft security product updates, emerging threats, and best practices. Drive initiatives to enhance security posture and ensure adherence to regulatory and organisational compliance standards.
\n

\n

Essential skills required:

\n

\n
• Related professional qualifications and experience, including degree level qualification.
\n
• Demonstratable experience of Microsoft Security Stack: Experience with Microsoft Defender suite, Sentinel, Entra ID, and Copilot for Security. Ability to monitor, analyse, and respond to alerts in Sentinel and Defender; familiarity with automation playbooks.
\n
• Demonstrable excellent written and verbal communication skills, with the ability to translate security risks, technical findings and recommended actions for technical and non-technical audiences.
\n
• Experience using PowerShell or Kusto Query Language (KQL) to support analysis, monitoring, and automation. Exposure to coding (e.g. Python) combined with a demonstrable ability to work with accuracy and attention to detail.
\n
• Cyber Security certifications, such as: CCSP, CySA+, GCIA, CSA, SC-200, or similar.
\n
• Demonstrable experience of working in an Enterprise information security function within a large organisation. Ability to work closely with ICT Security Lead, Identity & Access Administrator, and other stakeholders including colleagues across MKCC.
\n
• Practical experience with asset management systems and experience securing Microsoft 365 services (e.g. SharePoint, Teams, Copilot).
\n
• Evidenced knowledge and understanding of security frameworks, standards and best practices (CAF, Cyber Essentials, NIST, ISO27001).
\n
• Proven familiarity with modern network, cloud and identity security concepts such as authentication, firewalls, endpoint protection, email security, vulnerability management, logging, monitoring and security controls.
\n
• Continuous Learning and Adaptability: Commitment to staying updated on Microsoft security technologies, threat trends, and best practices.
\n

\n

\n For more information or to process your application, please apply now!