Information Security Compliance Analyst

TN United Kingdom; Bristol; Hybrid; GBP 55,000 - 60,000; Full time

Job summary

An established industry player is seeking an Information Security Compliance Analyst to join their growing team in Bristol. This pivotal role involves developing and implementing security policies, conducting compliance monitoring, and collaborating with various stakeholders to enhance security controls. The ideal candidate will possess a robust background in IT security, with proven experience in governance and compliance frameworks. This innovative firm offers a competitive salary, hybrid working arrangements, and opportunities for professional growth in a dynamic environment. If you're passionate about information security and eager to make a difference, this role is for you.

Qualifications

• 4+ years in IT, information security, or programme management roles.
• Experience with compliance standards like ISO27001 and PCI-DSS.
• Strong interest in information security and technology.

Responsibilities

• Develop and maintain information security policies and procedures.
• Conduct internal reviews and create compliance reports.
• Collaborate with stakeholders to manage security controls.

Skills

IT / Cyber security control reviews

Governance, Risk, and Compliance (GRC)

ISO27001

Cyber Essentials Plus

NIST

SOC2

PCI-DSS

Data Protection Act / GDPR

Information security frameworks

Analytical skills

Education

Bachelor's degree in Information Security

CISSP certification

CISM certification

CISA certification

CRISC certification

ISO27001 lead implementor

ISO27001 auditor

Job description

Social network you want to login/join with:

Information Security Compliance Analyst, Bristol

col-narrow-left

Client:

Robert Half

Location:

Bristol, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Reference:

c70263bd2e5f

Job Views:

8

Posted:

05.05.2025

Expiry Date:

19.06.2025

col-wide

Job Description:

Robert Half has partnered on an exclusive basis with a growing professional outsourcing organisation in the Greater Bristol area to recruit and Information Security Compliance Analyst on a permanent basis.

Role Responsibilities;

Policy Development and implementation:

• Develop and maintain information security policies, procedures, team documents and controls aligned with industry standards and regulations.
• Conduct regular policy reviews to ensure adherence to agreed-upon policies
• Provide guidance and support across the Group on information security matter
• Support delivery of the Information Security Awareness For Everyone (SAFE) programme
• Scope and conduct internal reviews to evaluate the effectiveness of information security controls, creating detailed compliance reports and remediation plans.
• Coordinate with internal and external auditors to prepare for, and respond to, information security assessments.
• Ensure Group IT and Security risk registers are managed effectively.
• Collaborate with business stakeholders to agree, implement, and manage security controls for key business systems and processes.

Third Party Management:

• Using agreed frameworks, assess and monitor the security of third parties
• Ensure that regular, scheduled security assessments are undertaken
• Collaborate with internal incident response teams to develop and implement preventive measures, based on incident findings.

Compliance Monitoring and Reporting:

• Maintain accurate and up-to-date documentation related to compliance effort
• Generate status reports for management and regulatory bodies
• Support the continuous improvement and expansion of our Information Security Management System (ISMS).
• Remain up to date with industry best practice, new technologies and emerging threats.

Skills/experience

• Proven experience in performing IT / Cyber security control reviews
• Minimum of 4 years' experience in IT, information security or programme management positions, with a preference for those involving Governance, Risk, and Compliance (GRC) programmes.
• Broad ranging analyst skills acquired while working on diverse IT and / or business projects
• Solution management experience including requirements analysis, solution proposition, delivery tracking and benefits analysis.
• Experience working with Information security frameworks and compliance standards (e.g. ISO27001, Cyber Essentials Plus, NIST, SOC2 and PCI-DSS).
• Knowledge of a range of technical security controls and their operation
• Understanding of / experience of PCI-DSS controls and implementation
• Good understanding of the Data Protection Act / General Data Protection Regulation
• Strong interest in Information security and technology, and motivated to learn new technologies.
• A bachelor's degree in information security or industry recognised security certifications (e.g. CISSP, CISM, CISA, CRISC, ISO27001 lead implementor, ISO27001 auditor).
• £55,000 - £60,000 basic salary + additional benefits
• Hybrid working (2-3 days a week on site)

Robert Half Ltd acts as an employment business for temporary positions and an employment agency for permanent positions. Robert Half is committed to equal opportunity and diversity. Suitable candidates with equivalent qualifications and more or less experience can apply. Rates of pay and salary ranges are dependent upon your experience, qualifications and training.