Graduate Cyber Governance Analyst

Commify-Group; Nottingham; On-site; GBP 30,000 - 35,000; Full time

Benefits offered by this job

Competitive salary

Company bonus scheme

Healthcare cash plan

27 days annual leave

Wellbeing leave

Birthday off

Pension 5%

Death in service 4x

Annual award recognition

Social events

Training & development

Job summary

Commify is seeking a Graduate Cyber Governance Analyst to support our Cyber Security team. You will work directly with the Cyber Security Manager and gain multi-territory exposure across 20+ global compliance frameworks.

The role focuses on evidence management, risk action tracking, control testing, and policy communication to keep our security program strong. Ideal candidates are eager to learn, detail-oriented, and prepared to pursue a long-term career in cyber security, risk, and compliance,

Qualifications

• Degree related to cyber security.
• Clear written and spoken English with ability to collaborate with technical and non-technical colleagues.
• Genuine enthusiasm for cyber governance, cyber security, risk or compliance and willingness to learn.
• Eligible to work in the UK.
• Familiarity with cyber governance frameworks or standards and GRC tools is a bonus.

Responsibilities

• Source, collect and maintain audit-ready evidence for ISO 27001, PCI DSS, SOC 2 and Cyber Essentials.
• Help manage the technology risk register with many action items.
• Execute routine security tests to ensure policy adherence.
• Work with SCF to map evidence and standardise control responses.
• Assist in security awareness training and phishing simulations.
• Support rollout and tracking of information security policies across teams.

Skills

English communication

Collaboration

Cyber governance interest

Education

Degree in cyber security

Job description

At Commify, we're not just a company, we're a globally connected team of innovators who love what we do. As a CPaaS leader with 25 years of groundbreaking experience, we're the force behind over 7 billion customer interactions each year, enabling businesses worldwide to connect via advanced channels like SMS, RCS, and complex mobile journeys.

Our culture is our core strength. Operating across the UK, EMEA, the USA, and Australia, we've fostered a truly diverse and connected environment, earning a consistent 4 out of 5 culture score in our employee engagement surveys. You'll join a vibrant team where your diverse experience makes a daily global impact.

We need talented people to grow a global company where everyone feels proud to belong, have a purpose and do their best to directly shape the digital future.

We are looking for a Graduate Cyber Governance Analyst. Working directly alongside our Cyber Security Manager, you will form the operational backbone of our Cyber Security team. This hands-on role gives you unprecedented, multi-territory exposure across more than 20 global compliance frameworks.

If you are eager to learn, detail-oriented, and keen to build a long-term career in cyber security, risk, and compliance, this is your launchpad.

What You'll Be Doing

• Evidence Management: Source, collect, and maintain the audit-ready technical evidence behind major standards like ISO 27001, PCI DSS, SOC 2, and Cyber Essentials.
• Risk Action Tracking: Help manage our technology risk register, chasing updates and keeping around 140+ action items moving forward.
• Control Testing: Execute routine security tests across assigned frameworks to ensure technical teams adhere to our security policies.
• Framework Standardisation: Work with the Common Controls Framework (SCF) to streamline control answers and map evidence, making audits smoother for technical teams.
• Security Awareness & Training: Help run company-wide security training, manage phishing simulations, and keep our global team cyber-smart.
• Policy Communication: Support the rollout of information security policies across international teams and track compliance.

What We're Looking For

• Degree: A degree related to cyber security.
• Communication Skills: Clear written and spoken English, with the confidence to collaborate with technical and non-technical colleagues alike.
• Passion for Cyber Security: A genuine enthusiasm for cyber governance, cyber security, risk, or compliance, alongside a strong desire to learn.
• Right to Work: Eligible to work in the UK.
• Bonus Points (Desirable): Any prior exposure to cyber governance frameworks or standards such as ISO 27001, PCI DSS, SOC 2, Cyber Essentials, or common controls frameworks through study or projects, familiarity with GRC tools, evidence or policy tracking systems, or phishing simulation platforms, or working towards a cyber security certification such as CompTIA Security+.

Benefits

• Competitive Salary (£30,000-35,000)
• Company Bonus Scheme
• Comprehensive healthcare cash plan
• A generous 27 days of annual leave in addition to Bank Holidays
• 2 Wellbeing leave days and 2 days dedicated to giving back to your community
• Enjoy your birthday off!
• Employer pension contribution at 5%
• Death in service benefit (4 times your salary)
• Annual award recognition
• Fun monthly and quarterly social events
• Opportunities for training and professional development