Information Security Compliance Analyst

Cpl Life Sciences; Hatfield; Hybrid; GBP 50,000 - 65,000; Full time

Job summary

Talantir in Hatfield is seeking an Information Security Compliance Analyst to support the ISO 27001:2022 ISMS, risk governance, and regulatory compliance across the EMEA region. The role collaborates with technical teams, stakeholders, and leadership to embed robust information security controls.

You will maintain compliance with NIS2, AI Act, GDPR, and data protection laws, lead audits, conduct risk assessments, and drive security awareness programs across business units.

Qualifications

• Degree-level qualification essential
• CISM and/or CISSP or other security certification desirable
• ISO 27001:2022 Lead Implementer/Auditor certification desirable
• Experience in Information Security, IT Governance, Risk & Compliance (GRC) roles
• Proven experience maintaining an ISO 27001-compliant ISMS
• Experience with information security management and training programmes
• Strong knowledge of ISO 27001:2022, NIS2, AI Act, GDPR and related regulations
• Experience conducting third-party risk assessments using ISO 27001 (essential) and ISO 31000 (desirable)
• Hands-on gap analysis, testing controls, and audits
• Data classification standards and security awareness delivery across units

Responsibilities

• Maintain and continually improve the ISO 27001 ISMS across the EMEA region
• Support audits and ensure compliance with global strategies and local regulations
• Develop, implement and maintain information security policies and procedures
• Lead third-party risk assessments and risk-register maintenance
• Deliver information security awareness training across multiple business units

Skills

Information security governance

GRC

Risk assessments

Audits

Policy development

Stakeholder management

Data protection

Third-party risk

Training development

Awareness programs

Education

Degree-level qualification

Job description

Information Security Compliance Analyst Hatfield / Hybrid 12-Month Fixed Term Contract

The Role

As an Information Security Compliance Analyst, you will play a key role in supporting the development, maintenance, and continual improvement of the EMEA Information Security Management System (ISMS).

You will ensure compliance with Global EIT strategy, EMEA business requirements, and relevant legislation, including NIS2, the AI Act, and GDPR. The role is responsible for maintaining ISO 27001:2022 certification, supporting audits, and ensuring adherence to health, safety, financial, and data privacy regulations.

Working closely with technical teams, business stakeholders, and senior leadership, you will help embed strong information security governance and awareness across multiple business units.

What We’re Looking For

• Degree-level qualification (or equivalent experience) – essential
• CISM and/or CISSP or other relevant security certification – highly desirable
• ISO 27001:2022 Lead Implementer / Auditor certification – highly desirable
• Demonstrable experience in Information Security, IT Governance, Risk & Compliance (GRC) roles
• Proven experience maintaining and continually improving an ISO 27001-compliant ISMS
• Experience in information security management and/or security awareness programmes
• Strong knowledge of industry frameworks and regulations, including:ISO 27001:2022NIS2AI ActGDPRExtensive experience
• Conducting information security risk assessments and reporting risks
• Experience developing, implementing, and maintaining information security policies, standards, and procedures
• Strong experience in risk management and maintaining risk registers
• Experience conducting third-party risk assessments using frameworks such as ISO 27001 (essential) and ISO 31000 (desirable)
• Hands-on experience performing gap analysis, testing security controls, and supporting audits
• Experience establishing and maintaining data classification standards
• Experience designing and delivering information security awareness training across multiple business units
• Experience ensuring compliance with UK and EMEA data protection legislation, including DPA and GDPR
• Good working knowledge of a broad range of IT platforms, technologies, and services
• Strong stakeholder management skills across technical, non-technical, and executive-level audiences
• Excellent business and customer-facing experience