Internal Abuse Monitoring Analyst (Operations)

Posting date:	15 December 2025
Salary:	£38,772 to £39,621 per year
Hours:	Full time
Closing date:	31 December 2025
Location:	Manchester
Company:	Government Recruitment Service
Job type:	Permanent
Job reference:	436984/2

Summary

The role of the Internal Abuse Monitoring Analyst (Operations) sits within the Internal Abuse Monitoring Team (IAM). The team plays a key role in identifying and escalating internal threats and security breaches involving analytical systems, triaging, and progressing potential cases of malicious activity ensuring that service delivery is not affected as a result of potential malicious activity from internal threat actors.

The Internal Abuse Monitoring Team plays a vital role in securing DWP systems and services including Universal Credit and other DWP Benefits and data systems, and ensuring the Department fulfils its responsibilities for the secure, appropriate and proportionate use of citizen data as dictated by legislation.

You will work as part of an innovative and service-orientated team of analysts, focused on the detection and investigation of inappropriate or malicious activity across a range of Departmental data systems, providing comprehensive analysis of assurance alerts as well as proactive analysis of activity captured in system logs to quickly determine if behaviour/activity detected warrants closer investigation and whether data may have been accessed or used inappropriately.

The Internal Abuse Monitoring Analyst (Operations) collaborates with stakeholders across the Cyber Resilience Centre and wider security community to ensure an effective response to alerts and risks as they are identified, responding to developing fraud threats and security breaches against the Departments IT systems, triaging and progressing potential cases of malicious activity, using analytical tools and root-cause analysis techniques to do so.

The Internal Abuse Monitoring Analyst (Operations) reports to the Senior Internal Abuse Monitoring Analyst (Operations). The Internal Abuse Monitoring Team operates within DWPs Cyber Resilience Centre (CRC) and forms part of the Personnel Security and Insider Threat Monitoring Group (PSITMG).

Proud member of the Disability Confident employer scheme

About Disability Confident

A Disability Confident employer will generally offer an interview to any applicant that declares they have a disability and meets the minimum criteria for the job as defined by the employer. It is important to note that in certain recruitment situations such as high-volume, seasonal and high-peak times, the employer may wish to limit the overall numbers of interviews offered to both disabled people and non-disabled people. For more details please go to Disability Confident.