Volunteer Security Operations Assistant

What will you be doing?

Working alongside our IT Lead, the Volunteer Security Operations Assistant will help protect Supporting Humanity’s systems, information and services while supporting our security and compliance activities.

Key responsibilities will include:

• Assisting with routine security monitoring and checks
• Supporting user access reviews and maintaining accurate access records
• Updating incident, risk and action registers
• Gathering and organising evidence for audits and compliance reviews
• Helping maintain cybersecurity policies, procedures and other documentation
• Supporting phishing-awareness activities and general cyber-safety communications
• Assisting with supplier security checks and due diligence
• Helping track security actions and following up with relevant colleagues

What are we looking for?

We are looking for someone who is organised, reliable and able to handle sensitive information with discretion.

You must have at least three years’ professional experience in at least one of the following areas: network/system management or data protection/GDPR. Experience in both is not required, but your background should be relevant to the security responsibilities of this role.

You will apply your expertise to help review access controls, identify security or information-handling risks, maintain accurate compliance records and support practical improvements alongside our IT Lead.

The most important qualities and skills are:

• Strong attention to detail and accurate record-keeping
• Practical understanding of cybersecurity, information security or data protection risks
• Good written communication skills and the ability to explain issues clearly
• Confidence using Microsoft 365 applications
• Ability to work independently and manage agreed tasks remotely
• A responsible approach to confidentiality and data protection
• Ability to work collaboratively with the IT Lead and recommend improvements within your area of expertise

Knowledge of ISO 27001, Cyber Essentials, security risk management, Microsoft Defender, Azure/Entra ID, monitoring tools or ticketing systems would be desirable. You do not need experience with all of these frameworks or tools.

What difference will you make?

Your support will help Supporting Humanity protect the sensitive information entrusted to us by our service users, volunteers and staff.

By improving our security records, access controls, risk monitoring and audit evidence, you will help us reduce cyber risks and strengthen our readiness for recognised standards such as Cyber Essentials and ISO 27001.

This will allow our team to operate more safely and confidently while continuing to focus its time and resources on supporting people through our wellbeing, bereavement and community services.