Cyber/Compliance Officer

Morson Edge; Tees Valley; On-site; GBP 41,000 - 50,000; Full time

Job summary

Morson Edge is seeking an experienced Compliance & Cyber Officer to own compliance and cyber security activities in a technical environment. The role suits someone who can work independently and take ownership from day one.

You will lead Cyber Essentials certifications, GDPR compliance, policy development, and ongoing security training while coordinating penetration testing and technology risk management for the organisation.

Qualifications

• Hands-on compliance and cyber security in a technical environment.
• Experience with Cyber Essentials / Cyber Essentials Plus.
• Knowledge of GDPR, data protection and compliance controls.
• Familiarity with GRC tooling and policy development.
• Understanding of penetration testing basics and IT security.
• Ability to write and implement IT policies and BC plans.

Responsibilities

• Own and manage Cyber Essentials / Cyber Essentials Plus certification.
• Lead GDPR and data protection compliance activities, including DSARs and breach reporting.
• Develop and maintain company policies, controls and business continuity plans.
• Support and coordinate penetration testing activities.
• Monitor and report on compliance using GRC tools.
• Conduct internal audits and identify improvement areas.
• Provide guidance and training on compliance and security matters.
• Provide technical IT support to the wider IT function when required.

Skills

Cybersecurity

Compliance management

GDPR & data protection

Policy writing

Stakeholder communication

Independence

Tools

GRC tooling

Microsoft 365

Azure AD

Windows Server

Penetration testing basics

Job description

Location: Middlesbrough – 5 days on-site

Salary: Up to £45,000

We’re looking for an experienced Compliance & Cyber Officer to take ownership of compliance and cyber security activities within a technical environment.

This is a hands‑on role suited to someone with a strong technical background who can work independently and take ownership from day one.

Key Responsibilities

• Own and manage Cyber Essentials / Cyber Essentials Plus certification.
• Lead GDPR and data protection compliance activities, including DSARs, breach reporting and records of processing.
• Develop and maintain company policies, controls and business continuity plans.
• Support and coordinate penetration testing activities.
• Monitor and report on compliance using relevant GRC/compliance tools.
• Conduct internal audits and identify areas for improvement.
• Provide guidance and training on compliance and security matters.
• Provide technical support to the wider IT function when required.

About You

• Strong technical IT background, ideally at 2nd/3rd line level.
• Practical experience with Cyber Essentials / Cyber Essentials Plus.
• Good knowledge of GDPR, data protection and compliance controls.
• Experience with compliance/GRC tooling.
• Understanding or experience of penetration testing.
• Experience writing and implementing IT policies and business continuity plans.
• Good knowledge of Microsoft 365/Azure AD, Windows Server and networking.
• Strong communication skills with the confidence to work with both technical and non-technical stakeholders.
• Able to work independently and take ownership of projects.