Information Security Analyst

allpay Limited; Hereford; On-site; GBP 35,000 - 52,000; Full time

Benefits offered by this job

Defined contribution pension

Income protection

Life assurance

Private healthcare

Health & wellbeing options

Learning & Development opportunities

On-site café

On-site gym

Farm shop and café – The Sidings

Job summary

allpay Limited here in Hereford seeks an Information Security Analyst to join the Compliance team and support the ongoing development and maintenance of the information security framework.

You will work with the Director of Governance, Information Security Manager and CSOC to ensure compliance with key information security standards and participate in audits and assurance programmes across the business.

Qualifications

• Organised and analytical with strong communication skills.
• Ability to manage multiple priorities and detail-oriented reporting.
• Experience using MS Office applications (Word, Excel, SharePoint).
• Collaborative team player with initiative and problem-solving mindset.
• Willingness to develop information security qualifications.

Responsibilities

• Support compliance with ISO 27001, PCI DSS, Cyber Essentials Plus and UK GDPR.
• Assist with PCI DSS compliance programme management and monitoring.
• Produce compliance reports, security KPIs and management information.
• Support data mapping activities for data protection requirements.
• Manage supplier assurance and third-party security reviews.
• Assist with audits, evidence gathering and remediation actions.
• Maintain Cyber Essentials Plus certification and assist card scheme activities.
• Provide information security guidance to stakeholders.

Skills

Communication skills

Organisational skills

Report writing

MS Office

SharePoint

Team collaboration

Analytical

Problem solving

Tools

Microsoft Word

Microsoft Excel

SharePoint

Job description

About The Role

We're looking for an Information Security Analyst to join our Compliance team and support the ongoing development and maintenance of allpay's information security framework.

This is a varied role where you'll work closely with the Director of Governance, Information Security Manager and Cyber Security Operations Centre (CSOC) team to help ensure compliance with key information security, data protection and industry standards. You'll support audits, compliance activities, assurance programmes and security initiatives that help protect allpay, our clients and our customers.

You'll support the delivery of information security, compliance and assurance activities across the business.

Your key responsibilities include:

• Supporting compliance with standards and frameworks including ISO 27001, PCI DSS, Cyber Essentials Plus and UK GDPR.
• Assisting with the management and monitoring of allpay's PCI DSS compliance programme.
• Producing compliance reports, security KPIs and management information.
• Supporting data mapping activities to meet data protection requirements.
• Managing supplier assurance and third-party security reviews.
• Supporting clients and internal teams with PCI DSS and information security requirements.
• Assisting with internal and external audits, including evidence gathering, control reviews and remediation actions.
• Maintaining Cyber Essentials Plus certification and supporting card scheme accreditation activities.
• Providing information security guidance and support to stakeholders across the business.

About You

We're looking for someone who is organised, analytical and passionate about information security, compliance and risk management.

You'll bring:

• Strong communication skills and the ability to work effectively with stakeholders at all levels.
• Excellent organisational skills and the ability to manage multiple priorities.
• Strong attention to detail and report-writing skills.
• Experience using Microsoft Office applications, particularly Word, Excel and SharePoint.
• The ability to work collaboratively as part of a team while also using your own initiative.
• A proactive approach to problem-solving and continuous improvement.
• The ability to remain organised and effective in a fast-paced environment.

While not essential, it would be beneficial if you have:

• Experience working within information security, compliance or governance functions.
• Knowledge of PCI DSS and payment card industry requirements.
• Awareness of ISO 27001 and information security management principles.
• Experience supporting audits, risk assessments or compliance reviews.
• A relevant information security qualification, or an interest in working towards one.

Here at allpay, we follow an Office First working model, reflecting the importance we place on in-person collaboration across our teams, most of whom are based on-site. While we are open to discussing flexible working arrangements, a strong on-site presence will be essential to support the existing teams and projects.

About Us

Why Join allpay?

People are at the heart of allpay, and we're proud to offer a competitive benefits package. This includes, Defined contribution group pension scheme, Income protection, Life assurance, Private Healthcare and a wide range of health and wellbeing options, as well as excellent Learning and Development opportunities.

On-Site Amenities at Hereford

Subsidised Café & Restaurant - Enjoy great food and quality coffee at discounted prices in our staff-only café and restaurant.

Staff Gym - Free access to our on-site gym, making it easy to fit exercise into your day.

The Sidings - Our on-site farm shop and café, open to the public, offering fresh local produce and a relaxed space to unwind.

These amenities mean you can enjoy a healthy lunch, fit in exercise before or after work, and take quality breaks without needing to travel.

Think You Need to Tick Every Single Box? You Really Don't

We welcome brilliant people from all backgrounds, identities and experiences, including those who think differently, learn differently, or bring unique approaches to problem-solving. Different minds make our teams stronger.

If you'd benefit from any adjustments or support during the recruitment process, whether that's extra time, a quieter space, a different format, or something else that helps you shine, just let us know. We're here to make the process work for you.

While we work with excellent recruitment agencies, we are selective about who we engage with. CVs will only be accepted once contractual terms and campaign agreements have been formally approved by our People Team.

To ensure fairness and compliance, CVs must not be submitted via email. Unsolicited CVs, including those from existing partners, will not be considered and will be treated as a free gift. If we choose to engage with these candidates, no fees will be payable, and submission implies acceptance of these terms. We appreciate your support in maintaining a smooth and transparent recruitment process.

We are a company committed to Equal Opportunities.

All roles at allpay Limited are subject to successful background checks, including a DBS check and credit check.