Hybrid Security Governance Analyst - ISMS & Compliance

Commify-Group; Nottingham; Hybrid; GBP 30,000 - 40,000; Full time

Benefits offered by this job

Competitive salary

Company bonus scheme

Healthcare cash plan

27 days annual leave + bank holidays

Wellbeing leave days

Birthday day off

Employer pension 5%

Death in service 4x salary

Annual awards

Social events

Training & development

Flexible hybrid working

Job summary

Commify-Group is seeking a Security Governance Analyst to join our Cyber Security team. With around one year of hands-on experience in information security, risk, or compliance, you will help drive our Information Security Management System (ISMS) across more than 20 active global frameworks, working directly with our Cyber Security Manager.

If you already have the fundamentals and seek breadth, high visibility, and clear career progression, this is your opportunity.

Qualifications

• Circa 1 year of experience in information security, compliance, GRC, or IT auditing.
• Familiarity with at least one major compliance standard (ISO 27001, Cyber Essentials, PCI DSS, or SOC 2).
• Strong organisational & stakeholder skills with ability to manage multiple priorities and chase updates.
• Methodical mindset with strong written skills for audit-proof documentation.
• Bonus points for experience with GRC tools or progress towards relevant certifications (e.g., Security+).

Responsibilities

• Sourcing, evaluating, and maintaining audit-ready evidence for frameworks like ISO 27001, PCI DSS, SOC 2, HIPAA, and Cyber Essentials.
• Driving technology risk action plans (~140+ items) and escalating stalled risks.
• Planning and executing routine control testing across frameworks to ensure compliance.
• Mapping control evidence to the Common Controls Framework (SCF) to standardise responses.
• Coordinating global security awareness training and managing phishing campaigns across territories.
• Overseeing distribution, communication, and acknowledgement of updated IS policies.

Skills

Information security experience

GRC familiarity

Stakeholder management

Attention to detail

Audit documentation

Tools

GRC tools

Job description

Commify-Group is seeking a Security Governance Analyst to join our Cyber Security team. With around one year of hands-on experience in information security, risk, or compliance, you will help drive our Information Security Management System (ISMS) across more than 20 active global frameworks, working directly with our Cyber Security Manager.

If you already have the fundamentals and seek breadth, high visibility, and clear career progression, this is your opportunity.