Information Security Compliance Analyst

JR United Kingdom; England; On-site; GBP 40,000 - 80,000; Full time

Job summary

An established industry player is seeking an Information Security Compliance Analyst for a 12-month fixed-term contract in a hybrid setting. This vital role involves supporting the EMEA-wide information security management system while ensuring compliance with global strategies and legislation such as GDPR and NIS 2. You will conduct risk assessments, manage security policies, and advise on security matters, making a significant impact in safeguarding sensitive information. If you have a passion for information security and compliance, this is an excellent opportunity to contribute to a critical area of business operations.

Qualifications

• Degree level qualification or equivalent is highly desirable.
• Relevant certifications like CISM and/or CRISC are highly desirable.

Responsibilities

• Support the development of the EMEA-wide information security management system.
• Ensure ISO 27001:2022 certification and conduct risk assessments.

Skills

Information Security

Risk Management

Compliance

Stakeholder Management

Education

Degree Level Qualification

Tools

ISO 27001

NIST

Job description

Social network you want to login/join with:

Information Security Compliance Analyst, Hertfordshire

Client: Cpl Life Sciences

Location: Hertfordshire, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 3

Posted: 28.04.2025

Expiry Date: 12.06.2025

Job Description:

We are seeking an Information Security Compliance Analyst for a 12-month fixed-term contract in a hybrid setting in Hertfordshire.

In this role, you will support the development and maintenance of the EMEA-wide information security management system in line with global strategies, business requirements, and relevant legislation such as NIS 2, AI Act, and GDPR.

Your responsibilities include ensuring ISO 27001:2022 certification, conducting risk assessments, developing risk mitigation plans, maintaining security policies, managing security awareness training, advising on security matters, and supporting audits.

Qualifications and Experience:

• Degree level qualification or equivalent (highly desirable)
• Relevant certifications like CISM and/or CRISC (highly desirable)
• Experience in information security, IT governance, risk, and compliance, especially with ISO 27001
• Knowledge of industry frameworks such as ISO 27001, ISO 27002, ISO 27005, ISO 31000, NIST
• Experience with risk assessments, policy development, and third-party due diligence
• Proven ability to lead audits and establish data classification standards
• Project management experience in security, data protection, and compliance initiatives
• Knowledge of UK/EMEA data protection laws like DPA and GDPR
• Stakeholder management skills at technical and executive levels