Graduate Cyber Governance Analyst — Global Exposure & Growth

Commify; Nottingham; On-site; GBP 30,000 - 35,000; Full time

Benefits offered by this job

Competitive Salary

Company Bonus Scheme

Healthcare cash plan

27 days annual leave

Wellbeing days

Birthday off

Pension 5%

Death in service 4x

Awards & events

Training & development

Job summary

Commify, a global CPaaS leader, is looking for a Graduate Cyber Governance Analyst. You will work directly with our Cyber Security Manager and gain hands-on exposure to over 20 global frameworks across ISO 27001, PCI DSS, SOC 2 and Cyber Essentials.

You'll source evidence, track risk actions, run control testing, and help standardise framework answers while participating in security awareness training and policy rollout across international teams. A long-term cyber security career awaits.

Qualifications

• Degree related to cyber security.
• Clear written and spoken English with ability to collaborate across technical and non-technical colleagues.
• Genuine enthusiasm for cyber governance, security, risk or compliance and a desire to learn.
• Eligibility to work in the UK.
• Desirable exposure to ISO 27001, PCI DSS, SOC 2, Cyber Essentials or GRC tools.

Responsibilities

• Source, collect, and maintain audit-ready evidence for major standards (ISO 27001, PCI DSS, SOC 2, Cyber Essentials).
• Help manage the technology risk register with 140+ action items moving forward.
• Execute routine security tests across frameworks to ensure policy adherence.
• Standardise controls and map evidence with the SCF framework to ease audits.
• Assist security awareness training and phishing simulations across the company.
• Support rollout of information security policies across international teams.

Skills

Communication skills

English proficiency

Cyber governance enthusiasm

Education

Degree related to cyber security

Job description

Commify, a global CPaaS leader, is looking for a Graduate Cyber Governance Analyst. You will work directly with our Cyber Security Manager and gain hands-on exposure to over 20 global frameworks across ISO 27001, PCI DSS, SOC 2 and Cyber Essentials.

You'll source evidence, track risk actions, run control testing, and help standardise framework answers while participating in security awareness training and policy rollout across international teams. A long-term cyber security career awaits.