Governance, Risk and Compliance Analyst

Smart Communications.; England; Hybrid; GBP 40,000 - 65,000; Full time

Benefits offered by this job

Extensive health insurance

Income protection

Life assurance

Subsidised gym membership

Leisure travel insurance

Pension contribution

25 days holiday plus additional day for birthday

Job summary

A leading software company is looking for a Governance, Risk and Compliance Analyst to enhance the security culture. The role involves creating policies, managing security risks, and ensuring compliance with various regulations. Ideal candidates have experience with frameworks like ISO27001 and strong knowledge of cloud environments. The position offers a hybrid work setup, competitive salary, and comprehensive benefits including health insurance and gym membership.

Qualifications

• Experience in creating and maintaining policies related to Information Security.
• Manage third-party security risk management practices.
• Conduct risk assessments and audits.
• Knowledge of Unix/Linux and Windows environments.
• Certifications such as CISA, CISSP.
• Experience with ITIL framework.

Responsibilities

• Audit compliance to internal policies and produce corrective action reports.
• Design, implement, and manage training and awareness initiatives.
• Report on the status of Compliance across the business.
• Audit compliance to internal policies, standards, and guidelines, with progress tracking.
• Conduct risk assessments and audits.
• Support projects and onboarding, ensuring contractual clauses are embedded.
• Report on the status of Compliance across the business.
• Complete security questionnaires and RFPs.
• Collaborate with project teams to ensure changes meet Compliance requirements.

Skills

Knowledge and experience of ISO27001, PCI DSS, SOC2, NIST and CIS benchmarking

Knowledge and experience achieving and maintaining compliance with relevant legislation, such as DPA, GDPR

Knowledge of cloud environments (AWS, Azure)

Knowledge of Unix/Linux and Windows environments

Certifications (CISA, CISSP)

Experience with frameworks such as ITIL

Tools

AWS

Azure

Job description

Join to apply for the Governance, Risk and Compliance Analyst role at Smart Communications.

Direct message the job poster from Smart Communications.

Reporting to the Governance, Risk and Compliance Director, the Governance, Risk and Compliance Analyst will be responsible for all things Governance, Risk, and Compliance. You will influence and ensure a culture of embedding security culture into the fabric of the organisation.

The role would suit a career driven individual with a passion to develop their own skills and knowledge in security for this challenging but highly rewarding position.

About Smart Communications

Smart Communications is the trusted choice for regulated enterprises looking to modernize complex processes and connect with customers in the moments that matter most. Our Conversation Cloud™ platform powers frictionless, compliant, digital-first experiences through omnichannel communications, intelligent data capture, and secure digital archival. More than 650 enterprises worldwide—including Zurich Insurance, Priority Health, The Pacific Financial Group, and The Bancorp—rely on Smart Communications to reduce compliance risk, boost operational efficiency, lower costs, and fast-track digital transformation that fuels business growth and elevates the customer experience. With more than 30 pre-built connectors, Smart Communications’s cloud-native platform integrates effortlessly with the world’s most trusted enterprise systems including Salesforce, Guidewire, DuckCreek, OneSpan, and Pega, enabling more than 60 billion mission‑critical customer conversations globally, and driving faster time to value.

The responsibilities of the role include

• Creating and maintaining policies, standards, and guidelines related to Information Security
• Managing third party security risk management practices
• Designing, implementing, and managing training and awareness initiatives
• Audit compliance to internal policies, standards, and guidelines, producing and tracking progress of corrective action reports
• Conducting risk assessments and audits
• Experience supporting projects, and supplier/customer onboarding, ensuring necessary contractual clauses are embedded into contracts
• Reporting on the status of Compliance status across the business
• Completion of security questionnaires/RFP’s
• Work cooperatively with project team when assigned and ensure that new project and changes adhere to Compliance requirements

What we’re looking for

Must have skills/experience

• Knowledge and experience of ISO27001, PCI DSS, SOC2, NIST and CIS benchmarking
• Knowledge and experience achieving and maintaining compliance with relevant legislation, such as DPA, GDPR
• Knowledge of cloud environments (AWS, Azure)
• Knowledge of Unix/Linux and Windows environments
• Certifications (CISA, CISSP)
• Experience with frameworks such as ITIL

We look for the following SMART values in everyone we hire at Smart Communications

• Speak Openly – We are positive, creative, helpful, kind and we have fun. We listen and provide constructive feedback. Through meaningful conversations we encourage each other to be the best that we can be. We’re not complainers we’re problem solvers.
• Make a Difference – We focus on the things that matter and prioritize the things that have the greatest impact. We celebrate success and hold ourselves accountable for our choices. We don’t sit on the sidelines.
• Agile & Flexible – We are focused on evolving, improving and growing. We think differently and challenge the status quo with open minds. We ask ‘why?’ so that we can help remove complexity. We don’t allow hurdles to get in our way.
• Results-Focused – We get stuff done by being efficient, working at pace and paying attention to detail. We focus on finding solutions and fixing things. We don’t believe in being busy for the sake of being busy, we focus on productivity.
• Teamwork – We are stronger and better together. We collaborate, trust and support each other to deliver results for our company and our customers. We don’t want anyone to feel disengaged, we’re in this together!

What’s the deal?

We will provide you with the tools, equipment and support to give you the best possible chance of success and over‑achieving your goals. Salary will depend on your experience and will be highly competitive.

In addition to a friendly and fun working environment, we provide a range of other benefits, including extensive health insurance, income protection, life assurance, subsidised gym membership, leisure travel insurance, pension contribution and 25 days’ holiday allowance plus an additional day off for your birthday!

Located in Covent Garden, our offices are comfortable, flexible, and are always stocked with free beverages and fresh fruit.

This role has a hybrid setup with 2 days a week in the office required.

So, if we interest you, please let us know by applying for this position and tell us all about yourself.

Please note: we only consider applicants with current legal right to work in the countries in which our positions are based. All qualified applicants will receive consideration for employment regardless of colour, religion, sex, national origin, sexual orientation, age, disability, marital status or gender identity.

To learn more about Smart Communications visit: https://www.smartcommunications.com/

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Information Technology

Industries

Software Development

Referrals increase your chances of interviewing at Smart Communications by 2x.