Compliance and Cyber Security Analyst

Personal Group; Milton Keynes; Hybrid; GBP 54,000 - 66,000; Full time

Benefits offered by this job

Holiday entitlement

Private medical insurance

Travel insurance

Enhanced parental leave

Online GP

Job summary

Personal Group is seeking an IT Compliance & Cyber Security Analyst in Milton Keynes (Hybrid, 2 days in the office). The role focuses on strengthening cyber security, compliance, and resilience across the business, collaborating with technical and non-technical teams to protect customers and colleagues.

The candidate will work across security operations, audits, and governance, with hands-on responsibilities in vulnerability management, incident response, and policy maintenance.

Qualifications

• Experience in a regulated UK environment (e.g., Insurance, Financial Services, Employee Benefits).
• Strong knowledge of Cyber Essentials Plus, ISO27001, PCI DSS, GDPR and security governance.
• Hands-on experience in cyber security operations: vulnerability, identity, endpoint and cloud security.
• Experience supporting audits, remediation and producing evidence packs.
• Confidence responding to client security questionnaires and due diligence requests.
• Familiarity with SIEM/SOC operations, alert triage and incident response.
• Excellent written and verbal communication skills.
• Proactive, ownership-driven approach and ability to manage competing priorities.
• Bonus: FCA-regulated experience, NIST CSF or CIS Controls, DevSecOps, DPIAs or relevant security certifications.

Responsibilities

• Providing Level 2 cyber security support, covering vulnerability management, patching, identity, endpoint and cloud security.
• Maintaining and evidencing compliance across Cyber Essentials Plus, ISO27001, PCI DSS, GDPR and FCA-aligned controls.
• Supporting and coordinating internal and external audits, managing remediation and ensuring evidence is audit-ready.
• Leading responses to client security questionnaires, RFPs and supplier assurance reviews.
• Supporting security incident triage, investigation and response alongside SOC and IT Operations.
• Reviewing SIEM alerts and helping improve monitoring and logging.
• Maintaining security policies, procedures, risk assessments and control documentation.
• Identifying opportunities to strengthen controls and improve our cyber security maturity.
• Producing clear technical documentation, runbooks and reporting for stakeholders.

Job description

Job Title: IT Compliance & Cyber Security Analyst

Location: Milton Keynes – Hybrid, 2 days in the office

Salary: Up to £60,000 Depending on experience

Contract Type: Permanent

Ready to make a real impact?

We’re looking for an IT Compliance & Cyber Security Analyst to join Personal Group, helping us strengthen our cyber security, compliance and resilience across the business.

This is a varied, hands‑on role for someone who enjoys solving problems, improving processes and getting stuck in. You’ll work across security operations, audit and compliance, while partnering with technical and non-technical teams to keep our people, customers and business protected.

This isn’t a role where you’ll simply tick boxes.

You’ll have the opportunity to make a genuine impact, working across technology, security, compliance and the wider business to strengthen how we protect our customers, colleagues and organisation.

What you’ll be doing

You’ll work across our diverse hybrid technology estate, including Microsoft 365 & Azure, AWS, on-premise infrastructure, SaaS applications and SIEM/SOC tooling.

Your day-to-day will include:

• Providing Level 2 cyber security support, covering vulnerability management, patching, identity, endpoint and cloud security.
• Maintaining and evidencing compliance across Cyber Essentials Plus, ISO27001, PCI DSS, GDPR and FCA-aligned controls.
• Supporting and coordinating internal and external audits, managing remediation and ensuring evidence is audit-ready.
• Leading responses to client security questionnaires, RFPs and supplier assurance reviews.
• Supporting security incident triage, investigation and response alongside SOC and IT Operations.
• Reviewing SIEM alerts and helping improve monitoring and logging.
• Maintaining security policies, procedures, risk assessments and control documentation.
• Identifying opportunities to strengthen controls and improve our cyber security maturity.
• Producing clear technical documentation, runbooks and reporting for stakeholders.

What you’ll bring

We’re looking for someone who combines technical know-how with great attention to detail and strong stakeholder skills.

You’ll ideally have:

• Experience within a regulated UK environment, such as Insurance, Financial Services, Employee Benefits or a similar sector.
• Strong knowledge of Cyber Essentials Plus, ISO27001, PCI DSS, GDPR and security governance.
• Hands‑on experience across cyber security operations, including vulnerability, identity, endpoint and cloud security.
• Experience supporting audits, remediation and producing evidence packs.
• Confidence responding to client security questionnaires and due diligence requests.
• Familiarity with SIEM/SOC operations, alert triage and incident response.
• Excellent written and verbal communication skills.
• A proactive, ownership-driven approach and the ability to manage competing priorities.

It would be a bonus if you have experience in an FCA-regulated environment, NIST CSF or CIS Controls, DevSecOps, DPIAs or relevant security certifications.

So, what’s in it for you?

• Minimum of 26 day holiday rising with service and option to purchase more (plus bank holidays on top!)
• Private medical insurance and practical health plan
• Free travel insurance
• Enhance maternity and paternity leave
• Online GP

These are just some of the many perks that we offer! To view the extensive range of benefits we offer, please visit our careers page - https://personalgroup.teamtailor.com/

Do you live our values?

Passion

Bringing energy and enthusiasm to your work every day. We value people who are motivated, engaged, and excited to make a difference.

Pace

We move with purpose, staying focused and efficient to get things done while maintaining high standards. We value action and smart decision-making to drive progress.

Professionalism

It’s not just about what we do, but how we do it. We approach every task with integrity, respect, and a commitment to delivering our best work.

Diversity, Inclusion & Flexibility

Personal Group is proud to be an inclusive employer and welcomes applications from people of all backgrounds and experiences. We support flexible working where possible, with core hours typically between 10:00–16:00 and remaining hours worked to suit individual needs.

We are committed to making adjustments and providing accommodations throughout the recruitment process and employment, ensuring those with caring responsibilities, disabilities, or health conditions are fully supported. If you require any adjustments, please contact our Recruitment Team, we’re here to help.

About us

At Personal Group, we are a leading UK provider of employee benefits and health insurance. Since the 1980s, we have been on a mission to revolutionise insurance and employee benefits, and while our business has evolved over the past four decades, our commitment to supporting people and businesses has remained constant.

Today, we are focused on improving employee health, wellbeing and engagement, working towards our vision of being “the champion of affordable benefits, keeping businesses and their employees happy, healthy and protected.” Our culture is shaped by our core values of Pace, Passion and Professionalism, which guide how we work together, support our customers and deliver when it matters most.

Could You Be Our Next Great Hire?