Governance & Compliance Analyst

Marks and Spencer; London; Hybrid; GBP 40,000 - 60,000; Full time

Job summary

A leading retail company in London is seeking a Governance & Compliance Analyst to support their cybersecurity initiatives. You will play a vital role in implementing compliance frameworks, managing governance forums, and promoting training campaigns. Strong analytical skills and experience in compliance monitoring are essential. This position offers excellent growth and development opportunities in a dynamic team environment.

Benefits

20% colleague discount across M&S products

Competitive holiday entitlement

Discretionary bonus schemes

Defined Contribution Pension Scheme

Wide range of training programmes

Access to wellbeing support

Qualifications

• 3+ years of experience in assessing and monitoring compliance.
• Experience with risk management processes, methodologies, and tools.
• Ability to work collaboratively with various stakeholders.

Responsibilities

• Support the delivery of M&S's cybersecurity governance processes.
• Assist with the implementation of new compliance strategies.
• Contribute to managing cyber governance forums.

Skills

Experience with frameworks/standards such as CIS Controls, PCI, ISO 27001, ISO 27701 & 27017

Auditing/reviewing compliance documentation

Strong analytical skills

Knowledge of GDPR, Data Privacy

Good written and spoken presentation skills

Job description

Overview

Governance & Compliance Analyst to support the delivery of M&S's cybersecurity governance and compliance programmes. You'll play a key role in implementing our new compliance framework, meeting ongoing regulatory obligations, running governance forums, and driving awareness and training campaigns. This is a new role with excellent opportunities for growth and development within Cyber Security.

What's in it for you

Being a part of M&S is exactly that - playing your part to bring the magic of M&S to our customers every day. We're an inclusive, dynamic, exciting, and ever evolving business built on doing the right thing and bringing exceptional quality, value, service to every customer, whenever, wherever and however they want to shop with us.

Here are some of the benefits we offer that make working for M&S just that little bit more special

• After completing your probationary period, you'll receive 20% colleague discount across all M&S products and many of our third-party brands for you and a member of your household.
• Competitive holiday entitlement with the potential to buy extra holiday days!
• Discretionary bonus schemes awarded based on how you achieve your personal objectives and our performance as a business.
• A generous Defined Contribution Pension Scheme and Life Assurance.
• A dedicated welcome to our teams with a tailored induction and a wide range of training programmes to develop your skills.
• Amazing perks and discounts via our M&S Choices portal to maximise your financial and personal wellbeing.
• Industry-leading parental, adoption and neonatal policies, providing support and flexibility for your family.
• Access to a fantastic range of wellbeing support for all colleagues including access to our 24/7 Virtual GP and PAM Assist to support you and your family.
• A charity volunteer day to support a charity or cause you're passionate about through a dedicated day away from work.

What you'll do

• Support the delivery of M&S's cybersecurity governance processes and compliance obligations.
• Assist with the implementation of new compliance strategies and the roll-out of the compliance framework across the business.
• Contribute to the management of cyber governance forums, including risk management and project delivery tracking.
• Support the design and delivery of awareness and training campaigns to promote governance and compliance.
• Provide input and assistance on ongoing compliance commitments, ensuring regulatory and policy requirements are met.

Who you are

• Experience working with frameworks/standards such as CIS Controls, PCI, ISO 27001, ISO 27701 & 27017 etc
• Experience with auditing/reviewing compliance documentation to help assess, monitor and analyse the internal processes of the organisation to identify trends, anomalies and compliance issues (3+ years minimum)
• Strong analytical skills, strategic problem-solving, and strong ethical judgment skills
• Experience with risk management processes, methodologies, and tools
• Knowledge of GDPR, Data Privacy
• Good written and spoken presentation skills
• Experience working with a range of business stakeholders to agree on key decisions.

Everyone's welcome

We're ambitious about the future of retail. We're innovating, disrupting, and leading the way into a more inspiring, digital era. It's an exciting time to be part of M&S. To support us on our journey, we're building inclusive, diverse teams where everyone can be themselves, do their best work, and make change happen. We support each other and succeed together.

Don't worry if you don't meet every single requirement of the job description. It's more of a guide to what's possible within the role. If you're passionate, ready to work hard, and think the role feels right for you, we'd love to hear from you.

#LI-hybrid #hybridrole #LI-LS1