Senior Security Analyst

At Holland & Barrett, security isn't just about controls - it's about enabling people to do the right thing, safely and confidently. We're looking for a Senior Cyber Security Analyst - Assessment & Enablement to lead a key pillar of our People Security Strategy and help shape how security is understood, adopted, and embedded across the business.

This is a hands on, high impact role for someone who enjoys turning complex security requirements into practical, usable solutions - from AI governance and tooling to knowledge sharing and crisis readiness.

What you'll be doing

AI Safety & Acceptable Use

Own and continuously improve AI Acceptable Use guidance, embedding assurance into onboarding, vendor checks, and business processes.

Define misuse scenarios, escalation paths, and response approaches, using adoption and feedback to evolve guidance over time.

Security Tooling & Process Enablement

Improve the usability of security tools and processes by removing friction, simplifying approvals, and balancing protection with productivity.

Measure and report on the impact of process and tooling improvements.

Knowledge Base & Content Governance

Lead the design and governance of the People Security knowledge base, ensuring content is accurate, accessible, and embedded into everyday workflows.

Maintain clear ownership, review cycles, and use insight and feedback to improve clarity and relevance.

Process Ownership & Crisis Readiness

Maintain ownership and accountability for key people-driven security processes, with clear routes for escalation and support.

Design, test, and improve security crisis runbooks, leading tabletop exercises and embedding lessons learned.

Work closely with GRC, Security Operations, and Technology teams to deliver joined up security outcomes.

Produce insight-led reporting and mentor analysts within the People Security programme.

Key requirements:

Experience delivering security enablement, governance, or assurance improvements

Strong communicator - able to make complex security topics simple and practical

Analytical mindset with a focus on behaviour, data, and outcomes

Comfortable working across technical and non-technical teams

Highly organised, adaptable, and able to manage multiple initiatives

Curious and committed to continuous learning in cyber security

Experience running or supporting crisis simulations or tabletop exercises

Knowledge of AI governance and risk principles

Familiarity with ISO 27001, PCI DSS, NIST CSF, or similar frameworks

Experience creating structured security guidance or training content

Skills & Capabilities (SFIA-aligned)

Information Security

Assurance

Knowledge Management

Information Content Authoring

IT Tool Management

Requirements Management

Consultancy

Relationship Management

Event Monitoring

Why Holland & Barrett?

You'll be trusted to shape how security really works - influencing behaviour, improving decisions, and making a measurable difference across the organisation. If you're passionate about practical cyber security that enables people, we'd love to hear from you.

What we offer:

• Health Cash Plan
• Life Assurance
• Incentive Scheme - Based on company & personal performance
• Virtual GP
• Private Medical care
• Holiday Purchase option
• Access to 'Wellhub' with gyms, studios and wellbeing apps

Discounts & Savings

• 25% Colleague Discount with FREE Standard Delivery
• Exclusive Discounts from a wide range of partners
• £/€50 Annual Product Allowance to spend in store

Learning & Development

• Access to a variety of learning opportunities, including Level 2-5 Apprenticeships, Workshops and our Digital Learning Library
• AND MORE!

Holland and Barrett is an equal opportunity employer. We welcome diverse perspectives and are committed to creating an inclusive environment for all colleagues. We understand that when our colleagues are listened to, respected and valued for who they are, we build an organisation with belonging at its heart - making health and wellness a way of life for everyone.

Holland & Barrett does not accept unsolicited resumes from search firms/recruiters. Please do not forward resumes to our job alias, employees, or any other company location. Holland & Barrett is not and will not be responsible for any fees if a candidate submitted by a search firm/recruiter unless otherwise agreed with respect to specific open position(s).