Cyber Governance Analyst

Commify-Group

Nottingham

Hybrid

GBP 30,000 - 40,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Competitive salary

Company bonus scheme

Healthcare cash plan

27 days annual leave + bank holidays

Wellbeing leave days

Birthday day off

Employer pension 5%

Death in service 4x salary

Annual awards

Social events

Training & development

Flexible hybrid working

Job summary

Commify-Group is seeking a Security Governance Analyst to join our Cyber Security team. With around one year of hands-on experience in information security, risk, or compliance, you will help drive our Information Security Management System (ISMS) across more than 20 active global frameworks, working directly with our Cyber Security Manager.

If you already have the fundamentals and seek breadth, high visibility, and clear career progression, this is your opportunity.

Qualifications

Circa 1 year of experience in information security, compliance, GRC, or IT auditing.
Familiarity with at least one major compliance standard (ISO 27001, Cyber Essentials, PCI DSS, or SOC 2).
Strong organisational & stakeholder skills with ability to manage multiple priorities and chase updates.
Methodical mindset with strong written skills for audit-proof documentation.
Bonus points for experience with GRC tools or progress towards relevant certifications (e.g., Security+).

Responsibilities

Sourcing, evaluating, and maintaining audit-ready evidence for frameworks like ISO 27001, PCI DSS, SOC 2, HIPAA, and Cyber Essentials.
Driving technology risk action plans (~140+ items) and escalating stalled risks.
Planning and executing routine control testing across frameworks to ensure compliance.
Mapping control evidence to the Common Controls Framework (SCF) to standardise responses.
Coordinating global security awareness training and managing phishing campaigns across territories.
Overseeing distribution, communication, and acknowledgement of updated IS policies.

Skills

Information security experience

GRC familiarity

Stakeholder management

Attention to detail

Audit documentation

Tools

GRC tools

Job description

At Commify, we're not just a company, we're a globally connected team of innovators who love what we do. As a CPaaS leader with 25 years of groundbreaking experience, we're the force behind over 7 billion customer interactions each year, enabling businesses worldwide to connect via advanced channels like SMS, RCS, and complex mobile journeys.

Our culture is our core strength. Operating across the UK, EMEA, the USA, and Australia, we've fostered a truly diverse and connected environment, earning a consistent 4 out of 5 culture score in our employee engagement surveys. You'll join a vibrant team where your diverse experience makes a daily global impact.

We need talented people to grow a global company where everyone feels proud to belong, have a purpose and do their best to directly shape the digital future.

We are looking for a Security Governance Analyst with around 1 year of hands‑on experience in information security, risk, or compliance to join our Cyber Security team. Working directly alongside our Cyber Security Manager, you will act as the operational driver of our Information Security Management System (ISMS) across more than 20 active global frameworks.

If you already have the fundamentals down and are looking for a role that offers serious breadth, high visibility, and clear career progression, this is your opportunity.

What You’ll Be Doing

Evidence & Audit Management: Sourcing, evaluating, and maintaining audit‑ready technical evidence for frameworks like ISO 27001, PCI DSS, SOC 2, HIPAA, and Cyber Essentials.
Risk Register Ownership: Driving our technology risk action plans (~140+ items), proactively chasing technical teams, and escalating stalled risks to management.
Control Testing: Planning and executing routine testing across assigned frameworks to ensure internal teams comply with security standards.
Common Controls Framework (SCF): Mapping control evidence to the SCF to standardise responses and streamline audit workloads across multiple frameworks.
Security Culture & Awareness: Coordinating global security awareness training, managing phishing campaigns, and tracking completion rates across all territories.
Policy Rollout: Overseeing the distribution, communication, and acknowledgement tracking of updated IS policies.

What We’re Looking For

Experience: Circa 1 year of experience working in an information security, compliance, GRC, or IT auditing environment.
Framework Exposure: Familiarity with at least one major compliance standard (such as ISO 27001, Cyber Essentials, PCI DSS, or SOC 2).
Strong Organisational & Stakeholder Skills: Proven ability to manage multiple priorities, track action plans, and confidently challenge technical colleagues for updates.
Methodical Mindset: Sharp attention to detail with strong written skills for maintaining audit‑proof documentation.
Bonus Points (Desirable): Experience with GRC tools or progress towards relevant certifications (e.g., CompTIA Security+, ISO 27001 Foundation).

Benefits