Information Security Compliance Analyst

JR United Kingdom; Watford; Hybrid; GBP 45,000 - 65,000; Full time

Job summary

A leading company is seeking an Information Security Compliance Analyst for a 12-month fixed-term contract in Watford. In this hybrid role, you will support the EMEA-wide Information Security Management System and ensure compliance with relevant legislation. Responsibilities include conducting risk assessments and managing security awareness training. Ideal candidates will have a degree or equivalent and relevant certifications like CISM or CRISC.

Qualifications

• Experience in security, governance, risk, and compliance roles.
• Knowledge of ISO 27001, NIST frameworks.
• Relevant certifications such as CISM or CRISC.

Responsibilities

• Conducting risk assessments and developing mitigation plans.
• Supporting the creation and maintenance of security policies and standards.
• Managing security awareness training programs.

Skills

Governance

Risk Management

Compliance

Stakeholder Management

Education

Degree qualified or equivalent

Job description

Social network you want to login/join with:

Information Security Compliance Analyst, Watford, Hertfordshire

Client: Cpl Life Sciences

Location: Watford, Hertfordshire, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 5

Posted: 07.06.2025

Expiry Date: 22.07.2025

Job Description:

We are seeking an Information Security Compliance Analyst for a 12-month fixed-term contract in a hybrid role based in Hertfordshire. You will support the development and maintenance of the EMEA-wide Information Security Management System, ensuring compliance with global strategies, business requirements, and relevant legislation such as NIS 2, AI Act, and GDPR.

Your responsibilities include:

• Conducting risk assessments and developing mitigation plans
• Supporting the creation and maintenance of security policies and standards (ISO 27001, NIST, GDPR, etc.)
• Maintaining security procedures and conducting tabletop exercises
• Managing security awareness training programs
• Providing security guidance for business activities and projects
• Monitoring and reporting on security metrics
• Performing third-party security due diligence
• Supporting security audits

Qualifications and Experience:

• Degree qualified or equivalent (highly desirable)
• Relevant certifications such as CISM or CRISC (highly desirable)
• Experience in security, governance, risk, and compliance roles
• Knowledge of ISO 27001, ISO 27002, ISO 27005, ISO 31000, NIST frameworks
• Experience conducting risk assessments and audits
• Proven ability to develop policies, controls, and manage compliance
• Experience with third-party due diligence and data protection legislation (DPA, GDPR)
• Stakeholder management skills at all levels