Cyber & Compliance Lead: On-Site in Middlesbrough

Morson Edge; Tees Valley; On-site; GBP 41,000 - 50,000; Full time

Job summary

Morson Edge is seeking an experienced Compliance & Cyber Officer to own compliance and cyber security activities in a technical environment. The role suits someone who can work independently and take ownership from day one.

You will lead Cyber Essentials certifications, GDPR compliance, policy development, and ongoing security training while coordinating penetration testing and technology risk management for the organisation.

Qualifications

• Hands-on compliance and cyber security in a technical environment.
• Experience with Cyber Essentials / Cyber Essentials Plus.
• Knowledge of GDPR, data protection and compliance controls.
• Familiarity with GRC tooling and policy development.
• Understanding of penetration testing basics and IT security.
• Ability to write and implement IT policies and BC plans.

Responsibilities

• Own and manage Cyber Essentials / Cyber Essentials Plus certification.
• Lead GDPR and data protection compliance activities, including DSARs and breach reporting.
• Develop and maintain company policies, controls and business continuity plans.
• Support and coordinate penetration testing activities.
• Monitor and report on compliance using GRC tools.
• Conduct internal audits and identify improvement areas.
• Provide guidance and training on compliance and security matters.
• Provide technical IT support to the wider IT function when required.

Skills

Cybersecurity

Compliance management

GDPR & data protection

Policy writing

Stakeholder communication

Independence

Tools

GRC tooling

Microsoft 365

Azure AD

Windows Server

Penetration testing basics

Job description

Morson Edge is seeking an experienced Compliance & Cyber Officer to own compliance and cyber security activities in a technical environment. The role suits someone who can work independently and take ownership from day one.

You will lead Cyber Essentials certifications, GDPR compliance, policy development, and ongoing security training while coordinating penetration testing and technology risk management for the organisation.