At Holland & Barrett, security isn't just about controls — it's about enabling people to do the right thing, safely and confidently. We're looking for a Senior Cyber Security Analyst – Assessment & Enablement to lead a key pillar of our People Security Strategy and help shape how security is understood, adopted, and embedded across the business.

This is a hands-on, high-impact role for someone who enjoys turning complex security requirements into practical, usable solutions — from AI governance and tooling to knowledge sharing and crisis readiness.

What you'll be doing

AI Safety & Acceptable Use

• Own and continuously improve AI Acceptable Use guidance, embedding assurance into onboarding, vendor checks, and business processes.

• Define misuse scenarios, escalation paths, and response approaches, using adoption and feedback to evolve guidance over time.

Security Tooling & Process Enablement

• Improve the usability of security tools and processes by removing friction, simplifying approvals, and balancing protection with productivity.

• Measure and report on the impact of process and tooling improvements.

Knowledge Base & Content Governance

• Lead the design and governance of the People Security knowledge base, ensuring content is accurate, accessible, and embedded into everyday workflows.

• Maintain clear ownership, review cycles, and use insight and feedback to improve clarity and relevance.

Process Ownership & Crisis Readiness

• Maintain ownership and accountability for key people-driven security processes, with clear routes for escalation and support.

• Design, test, and improve security crisis runbooks, leading tabletop exercises and embedding lessons learned.

Collaboration & Leadership

• Work closely with GRC, Security Operations, and Technology teams to deliver joined-up security outcomes.

• Produce insight-led reporting and mentor analysts within the People Security programme.

Essential

• Experience delivering security enablement, governance, or assurance improvements

• Strong communicator — able to make complex security topics simple and practical

• Analytical mindset with a focus on behaviour, data, and outcomes

• Comfortable working across technical and non-technical teams

• Highly organised, adaptable, and able to manage multiple initiatives

• Curious and committed to continuous learning in cyber security

Desirable

• Experience running or supporting crisis simulations or tabletop exercises

• Knowledge of AI governance and risk principles

• Familiarity with ISO 27001, PCI DSS, NIST CSF, or similar frameworks

• Experience creating structured security guidance or training content

Skills & Capabilities (SFIA-aligned)

• Information Security

• Assurance

• Knowledge Management

• Information Content Authoring

• IT Tool Management

• Requirements Management

• Consultancy

• Education & Awareness

• Relationship Management

• Event Monitoring

Why Holland & Barrett?
You'll be trusted to shape how security really works — influencing behaviour, improving decisions, and making a measurable difference across the organisation. If you're passionate about practical cyber security that enables people, we'd love to hear from you.

What we offer:

Wellbeing & Lifestyle Benefits 

• Health Cash Plan  
• Life Assurance
• Incentive Scheme - Based on company & personal performance
• Virtual GP 
• Private Medical care
• FREE at-home blood test kit 
• Holiday Purchase option 
• Pension Contribution scheme
• Access to ‘Wellhub' with gyms, studios and wellbeing apps 

Discounts & Savings 

• 25% Colleague Discount with FREE Standard Delivery 
• Exclusive Discounts from a wide range of partners 
• £/€50 Annual Product Allowance to spend in store 

Learning & Development 

• Access to a variety of learning opportunities, including Level 2-5 Apprenticeships, Workshops and our Digital Learning Library 
• AND MORE! 

Holland and Barrett is an equal opportunity employer. We welcome diverse perspectives and are committed to creating an inclusive environment for all colleagues. We understand that when our colleagues are listened to, respected and valued for who they are, we build an organisation with belonging at its heart – making health and wellness a way of life for everyone.

Holland & Barrett does not accept unsolicited resumes from search firms/recruiters. Please do not forward resumes to our job alias, employees, or any other company location. Holland & Barrett is not and will not be responsible for any fees if a candidate submitted by a search firm/recruiter unless otherwise agreed with respect to specific open position(s).