Day-to-day operating brief
What Intelligence Analyst (Security) work looks like in practice
A Security Intelligence Analyst combines internal incidents, open sources and authorised reporting to assess threats to people, sites or operations. Terms should cover collection plans, source reliability, personal data, verification, analytical confidence, briefings, watchlists and retention. The analyst should not present rumour as fact, collect beyond purpose, profile protected characteristics or share sensitive reporting outside the approved audience. Intelligence Analyst (Security) is a security role focused on assignment instructions, access and patrol records, incident response, visitor or key control, evidence preservation, intelligence, analyst, site assignment. The contract should describe the role's practical duties, reporting route, records, standards and compliance obligations without importing wording from another industry The Employee is employed as Intelligence Analyst (Security) in the Employer's Security business. The role requires reasonable skill, care, accuracy, cooperation with management instructions and attention to the records, risks and standards specific to intelligence analyst (security) work The Employee must follow the security operational controls that apply to intelligence analyst (security) work, including SIA escalation, assignment instructions, access control, incident logs, patrol records and public interaction, accurate record keeping, escalation and safe working requirements The Employee must protect site, incident, CCTV, access-control, assignment, visitor, patrol and investigation records, including any personal data, customer or client information, operational records, pricing, credentials, security information, business plans and role-specific records accessed while performing intelligence analyst (security) duties Intelligence Analyst (Security) work in Security must follow SIA expectations where they apply, the Employer's policies, data protection controls, health and safety rules, role records, escalation routes and training requirements relevant to assignment instructions, access and patrol records, incident response. Family: security Intelligence Analyst (Security) Incident reporting Site awareness Public interaction Analytical products should separate indicators, assumptions and alternative explanations. Later contradictory evidence needs a controlled update reaching the original decision audience.
Responsibilities reflected in the contract
- Define intelligence requirements.
- Collect and evaluate authorised sources.
- Analyse patterns threats and uncertainty.
- Produce briefings and warnings.
- Control dissemination and source records.
A realistic working scenario
A Security Intelligence Analyst combines internal incidents, open sources and authorised reporting to assess threats to people, sites or operations. Terms should cover collection plans, source reliability, personal data, verification, analytical confidence, briefings, watchlists and retention. The analyst should not present rumour as fact, collect beyond purpose, profile protected characteristics or share sensitive reporting outside the approved audience.
Outputs to agree
- define intelligence requirements
- collect and evaluate authorised sources
- analyse patterns threats and uncertainty
Records and evidence
- The threat remit and decision customers.
- The source and collection authorities.
- The privacy and analytical standards.
- The dissemination and retention process.
- Work records.
- Handover notes.
Reporting relationship
Typically reports to Line Manager or Department Manager. Confirm the employer's actual reporting structure in the builder.
Authority and escalation
- A Security Intelligence Analyst combines internal incidents, open sources and authorised reporting to assess threats to people, sites or operations. Terms should cover collection plans, source reliability, personal data, verification, analytical confidence, briefings, watchlists and retention. The analyst should not present rumour as fact, collect beyond purpose, profile protected characteristics or share sensitive reporting outside the approved audience.
- Obtain approval before committing expenditure, changing contractual commitments or making regulated or staffing decisions outside the assigned role.
Tools and systems
- Access control systems.
- Radios.
- Risk assessment records.
Workplace context
- Office, client premises, remote systems or assigned work locations.
Training and certification
- Complete employer-required health and safety training.
Contract priorities
- the threat remit and decision customers
- the source and collection authorities
- the privacy and analytical standards
- the dissemination and retention process
Information the employer should prepare
- the threat remit and decision customers
- the source and collection authorities
- the privacy and analytical standards
- the dissemination and retention process
- the security lead legal and operational contacts
Individually written and reviewed against the maintained role record.