Graduate Cyber Governance Analyst

Commify; Nottingham; On-site; GBP 30,000 - 35,000; Full time

Benefits offered by this job

Competitive Salary

Company Bonus Scheme

Healthcare cash plan

27 days annual leave

Wellbeing days

Birthday off

Pension 5%

Death in service 4x

Awards & events

Training & development

Job summary

Commify, a global CPaaS leader, is looking for a Graduate Cyber Governance Analyst. You will work directly with our Cyber Security Manager and gain hands-on exposure to over 20 global frameworks across ISO 27001, PCI DSS, SOC 2 and Cyber Essentials.

You'll source evidence, track risk actions, run control testing, and help standardise framework answers while participating in security awareness training and policy rollout across international teams. A long-term cyber security career awaits.

Qualifications

• Degree related to cyber security.
• Clear written and spoken English with ability to collaborate across technical and non-technical colleagues.
• Genuine enthusiasm for cyber governance, security, risk or compliance and a desire to learn.
• Eligibility to work in the UK.
• Desirable exposure to ISO 27001, PCI DSS, SOC 2, Cyber Essentials or GRC tools.

Responsibilities

• Source, collect, and maintain audit-ready evidence for major standards (ISO 27001, PCI DSS, SOC 2, Cyber Essentials).
• Help manage the technology risk register with 140+ action items moving forward.
• Execute routine security tests across frameworks to ensure policy adherence.
• Standardise controls and map evidence with the SCF framework to ease audits.
• Assist security awareness training and phishing simulations across the company.
• Support rollout of information security policies across international teams.

Skills

Communication skills

English proficiency

Cyber governance enthusiasm

Education

Degree related to cyber security

Job description

At Commify, we're not just a company, we're a globally connected team of innovators who love what we do. As a CPaaS leader with 25 years of groundbreaking experience, we're the force behind over 7 billion customer interactions each year, enabling businesses worldwide to connect via advanced channels like SMS, RCS, and complex mobile journeys.

Our culture is our core strength. Operating across the UK, EMEA, the USA, and Australia, we've fostered a truly diverse and connected environment, earning a consistent 4 out of 5 culture score in our employee engagement surveys. You'll join a vibrant team where your diverse experience makes a daily global impact.

We need talented people to grow a global company where everyone feels proud to belong, have a purpose and do their best to directly shape the digital future.

We are looking for a Graduate Cyber Governance Analyst. Working directly alongside our Cyber Security Manager, you will form the operational backbone of our Cyber Security team. This hands‑on role gives you unprecedented, multi‑territory exposure across more than 20 global compliance frameworks.

If you are eager to learn, detail‑oriented, and keen to build a long‑term career in cyber security, risk, and compliance, this is your launchpad.

What You’ll Be Doing

• Evidence Management: Source, collect, and maintain the audit‑ready technical evidence behind major standards like ISO 27001, PCI DSS, SOC 2, and Cyber Essentials.
• Risk Action Tracking: Help manage our technology risk register, chasing updates and keeping around 140+ action items moving forward.
• Control Testing: Execute routine security tests across assigned frameworks to ensure technical teams adhere to our security policies.
• Framework Standardisation: Work with the Common Controls Framework (SCF) to streamline control answers and map evidence, making audits smoother for technical teams.
• Security Awareness & Training: Help run company‑wide security training, manage phishing simulations, and keep our global team cyber‑smart.
• Policy Communication: Support the rollout of information security policies across international teams and track compliance.

What We’re Looking For

• Degree: A degree related to cyber security.
• Communication Skills: Clear written and spoken English, with the confidence to collaborate with technical and non‑technical colleagues alike.
• Passion for Cyber Security: A genuine enthusiasm for cyber governance, cyber security, risk, or compliance, alongside a strong desire to learn.
• Right to Work: Eligible to work in the UK.
• Bonus Points (Desirable): Any prior exposure to cyber governance frameworks or standards such as ISO 27001, PCI DSS, SOC 2, Cyber Essentials, or common controls frameworks through study or projects, familiarity with GRC tools, evidence or policy tracking systems, or phishing simulation platforms, or working towards a cyber security certification such as CompTIA Security+.

Benefits

• Competitive Salary (£30,000-35,000)
• Company Bonus Scheme
• Comprehensive healthcare cash plan
• A generous 27 days of annual leave in addition to Bank Holidays
• 2 Wellbeing leave days and 2 days dedicated to giving back to your community
• Enjoy your birthday off!
• Employer pension contribution at 5%
• Death in service benefit (4 times your salary)
• Annual award recognition
• Fun monthly and quarterly social events
• Opportunities for training and professional development