Information Security Engineer

Information Security Engineer
Central London (Marylebone) Hybrid (2 Days Office) Up to £70,000 + Excellent Benefits
Private Healthcare Enhanced Pension 25 Days Holiday + Bank Holidays 37.5 Hour Working Week

We're recruiting an Information Security Engineer to join a globally recognised healthcare organisation, helping to protect critical systems, sensitive data and essential business operations.
This is an excellent opportunity to work across a broad security estate covering cloud security, vulnerability management, incident response, security monitoring and security engineering. You'll work closely with infrastructure, applications and business stakeholders to ensure security remains at the forefront of both operational activity and strategic technology initiatives.

Information Security Engineer - Key Responsibilities

Operate and develop the organisation's vulnerability management programme, including scanning, prioritisation, remediation tracking and reporting.
Monitor security tools and alerts, supporting the detection, investigation and response to security incidents.
Conduct technical investigations, root cause analysis and post-incident reviews.
Implement, configure and maintain security controls across networks, servers, endpoints, cloud platforms and business-critical systems.
Administer and optimise Microsoft security technologies, including Microsoft Defender, Microsoft Purview, Entra ID, Microsoft Sentinel and Azure security services.
Support and enhance endpoint protection, identity security, MFA, email security and log management solutions.
Work with infrastructure and application teams to ensure systems are securely configured, hardened and maintained.
Ensure systems and services align with relevant regulatory, compliance and security requirements.
Maintain security documentation, policies, procedures, standards and audit evidence.
Provide security input into projects, infrastructure changes and technology deployments.
Review technical designs and deliver pragmatic, risk-based security recommendations.
Act as a key technical security contact for suppliers, partners and third-party service providers.
Communicate security risks, issues and remediation plans to both technical and non-technical stakeholders.

Required Skills & Experience

Proven experience within an Information Security Engineer, InfoSec, Information Security Analyst, Security Analyst or Cyber Security role.
Strong technical understanding of cyber security principles, technologies and controls.
Hands-on experience operating vulnerability management and remediation processes.
Experience securing cloud, endpoint and network environments.
Good understanding of identity and access management (IAM), privileged access controls and multi-factor authentication (MFA).
Experience working within a regulated or compliance-driven environment.
Experience with Microsoft security technologies, including Microsoft Defender, Purview, Entra ID, Sentinel and Azure security services.
Ability to assess security risks and translate findings into practical recommendations for stakeholders.

Desirable Experience

Security certifications such as AZ-500, SC-200, Security+, CISSP, CISM or CEH.
Experience supporting security governance, risk and compliance activities.
Exposure to security monitoring, threat detection and incident response processes.
Experience within healthcare, financial services or other highly regulated environments.

What's on Offer?

Salary up to £70,000
Private Healthcare
Enhanced Pension
25 Days Holiday plus Bank Holidays
Hybrid Working (2 Days per Week in the Marylebone Office)
Ongoing Professional Development and Certification Support
Exposure to Enterprise-Scale Security Technologies and Projects
Opportunity to influence and mature security practices across the organisation
Collaborative and supportive working environment

To be considered for this Information Security Engineer opportunity, please apply today or contact George Harvey at ITSS Recruitment for a confidential discussion.