Cybersecurity Compliance Analyst

The Opportunity Hub UK Ltd; Leeds; Hybrid; GBP 34,000 - 43,000; Full time

Benefits offered by this job

Bonus scheme

Hybrid working

Private medical insurance

Pension contribution

Structured annual leave

Training and progression

Job summary

The Opportunity Hub UK Ltd is offering a role in Leeds for a junior to mid-level cybersecurity/compliance professional. You will conduct assessments against ISO 27001, NIST and Cyber Essentials, translate findings into clear action plans, support audits, and monitor policies to ensure they reflect day-to-day operations.

You’ll track risks, update compliance documentation, and stay ahead of regulatory changes, with a clear path for progression in a growing company.

Qualifications

• 1–2 years in cybersecurity, information security, IT audit or related compliance role.
• Working knowledge of ISO 27001, NIST, SOC 2 or Cyber Essentials.
• Ability to explain technical risk clearly to non‑technical audiences.
• Organizational skills to manage multiple audits and deadlines.
• Understanding of risk assessment methodology and control frameworks.
• Relevant certification (CompTIA Security+ or ISO 27001 Lead Implementer) is a bonus.

Responsibilities

• Running compliance assessments against ISO 27001, Cyber Essentials and NIST and translating results into plain-language action plans.
• Supporting internal and external audits, gathering evidence and closing out findings before they become problems.
• Monitoring policies and controls to ensure they match day-to-day operations.
• Tracking risk registers and chasing remediation work with relevant teams.
• Drafting and updating compliance documentation from security policies to client-facing assurance reports.
• Flagging regulatory changes and explaining implications for the business.

Skills

Cybersecurity basics

Audit & compliance

Documentation writing

Time management

Job description

Perfect role for a junior/mid professional looking to grow their Cybersecurity career in Leeds.

Here’s what you’ll be doing:

Running compliance assessments against frameworks like ISO 27001, Cyber Essentials and NIST, and translating the results into plain-language action plans

Supporting internal and external audits, gathering evidence and closing out findings before they become problems

Monitoring policies and controls to make sure they still match how the business actually operates day to day

Tracking risk registers and chasing up remediation work with the relevant teams

Drafting and updating compliance documentation, from security policies to client-facing assurance reports

Keeping an eye on regulatory changes and flagging what they mean for the business before they become urgent

Here are the skills you’ll need:

A year or two working in cybersecurity, information security, IT audit or a related compliance role

Working knowledge of at least one major framework (ISO 27001, NIST, SOC 2 or Cyber Essentials)

Comfortable writing clearly. A lot of this job is explaining technical risk to people who aren't technical

Organised enough to manage multiple audits and deadlines without things slipping

Some understanding of risk assessment methodology and control frameworks

A relevant certification (CompTIA Security+, ISO 27001 Lead Implementer, or similar) is a bonus, not a requirement

Key perks and benefits:

£34,000 to £43,000, plus a bonus scheme

Hybrid working, based out of Leeds with flexibility built in

Private medical insurance and pension contribution

Structured annual leave with genuine flexible working, not just the phrase on a job ad

Clear progression path within an established, growing company that actually invests in training

Why pursue a career in Cybersecurity?

Compliance requirements aren't going away. If anything, they're multiplying, and businesses that get caught out are paying real money for it. Leeds has become a genuine hub for cybersecurity and financial services work outside London, so the demand here is steady and the salaries reflect it. Get good at this and you'll rarely be short of options, because every business with data now needs someone who can prove they're protecting it properly.