Cyber Security & Compliance Administrator

Ipsum; North Stainmore; Hybrid; GBP 32,000 - 48,000; Full time

Benefits offered by this job

Annual leave 25 days + bank holidays

Pension plan

Car allowance

Professional qualifications support

Mental health support

Cycle to work

Discount club

Life assurance

Long service recognition

Social committees

Regular social events

Job summary

Ipsum is hiring a Cyber Security & Compliance Administrator in the North West region. The role focuses on maintaining the Information Security Management System in line with ISO 27001 and NIST requirements, participating in audits and strengthening our security controls across the business.

You will develop and update security policies, coordinate risk assessments, and ensure documentation supports all compliance activities.

Qualifications

• Proven experience in cybersecurity, compliance or audit roles.
• Familiar with ISO/IEC 27001, NIST CSF and Cyber Essentials.
• Knowledge of GDPR, PCI-DSS and cloud security controls (Azure/AWS).
• ISO 27001 Internal Implementer or Auditor certification is essential.

Responsibilities

• Maintain ISMS aligned with ISO 27001 and NIST requirements.
• Support internal and external audits for ISO 27001, Cyber Essentials and other frameworks.
• Monitor and promote compliance with security policies across departments.
• Develop, update and implement security policies, standards and guidelines.
• Coordinate risk assessments with documented mitigation actions.
• Maintain documentation and evidence for compliance activities.
• Support incident response and post-incident reviews from a compliance perspective.
• Stay updated on evolving cybersecurity regulations and best practices.
• Deliver training to raise staff awareness of compliance and security responsibilities.

Skills

ISO 27001

NIST CSF

Cyber Essentials

GDPR

PCI-DSS

Cloud security (Azure/AWS)

Education

Bachelor's degree in Information Security (desirable)

Tools

Audit management software

Job description

Location:

North West

Employment type:

Full time, Permanent

Working Hours:

Monday to Friday, with hybrid working model

What’s In It For You…

We believe in looking after our people, and it shows. When you join Ipsum, you’re not just taking a job, you are starting a career with real support behind it.

• 25 days annual leave plus bank holidays with the option to buy more
• Group Personal Pension Plan
• Car Allowance
• Career development & progression with the opportunity to earn professional qualifications
• 24/7 access to a virtual GP and Mental health support & counselling services
• Cycle to Work scheme
• Discount club - supermarkets, phone bills, gyms & more!
• Life assurance cover
• Long service recognition
• Active local social committees
• Regular social events

About The Role…

As a Cyber Security & Compliance Administrator you will support and maintain the organisation’s overall information security compliance posture, ensuring that our cybersecurity controls, policies and procedures remain aligned with regulatory and industry standards. You will work hands‑on with key frameworks including ISO/IEC 27001, the NIST Cybersecurity Framework and Cyber Essentials, helping to monitor, implement and improve compliance activities across the business. As a proactive and detail‑driven member of the team, you will play an essential role in strengthening our security environment, supporting audits, maintaining documentation and contributing to the ongoing maturity of our information security practices.

As a Cyber Security & Compliance Administrator you will…

• Maintain and continually improve the organisation’s Information Security Management System (ISMS) in alignment with ISO 27001 and NIST requirements.
• Conduct internal audits and support external audits for ISO 27001, Cyber Essentials and other key security frameworks.
• Monitor and promote compliance with security policies and procedures across all departments.
• Assist in developing, updating and implementing security policies, standards and guidelines.
• Coordinate risk assessments, ensuring mitigation actions are documented, tracked and successfully implemented.
• Maintain accurate documentation and evidence to support all compliance activities.
• Support incident response processes and contribute to post‑incident reviews from a compliance standpoint.
• Stay informed on evolving cybersecurity regulations, frameworks and best practice.
• Deliver training and awareness sessions to strengthen staff understanding of compliance and security responsibilities.

About You…

You bring proven experience in a cybersecurity, compliance or audit role, with strong knowledge of ISO/IEC 27001, NIST CSF and Cyber Essentials. You’re familiar with GDPR, PCI‑DSS and cloud security compliance (Azure or AWS), and comfortable working with compliance tools or audit management systems. An ISO 27001 Internal Implementer or Auditor certification is essential, and a degree in Information Security, Computer Science or a related field is desirable.

You’re highly organised, able to manage multiple priorities and work both independently and collaboratively across teams. With excellent written and verbal communication skills and a solid understanding of risk management and security controls, you can engage effectively with stakeholders at all levels. You also have a strong interest in staying up to date with emerging cyber threats and evolving compliance standards.

Our commitment to Equal Opportunities…

We’re proud to be an equal opportunities employer. We welcome applications from all backgrounds and experiences, and we’re committed to building a diverse and inclusive workforce. Before applying, please review our Privacy Policy to understand how we process your data in line with GDPR.