Information Security Compliance Analyst ISO27001/GDPR

Cpl Life Sciences; Hatfield; Hybrid; GBP 50,000 - 65,000; Full time

Job summary

Talantir in Hatfield is seeking an Information Security Compliance Analyst to support the ISO 27001:2022 ISMS, risk governance, and regulatory compliance across the EMEA region. The role collaborates with technical teams, stakeholders, and leadership to embed robust information security controls.

You will maintain compliance with NIS2, AI Act, GDPR, and data protection laws, lead audits, conduct risk assessments, and drive security awareness programs across business units.

Qualifications

• Degree-level qualification essential
• CISM and/or CISSP or other security certification desirable
• ISO 27001:2022 Lead Implementer/Auditor certification desirable
• Experience in Information Security, IT Governance, Risk & Compliance (GRC) roles
• Proven experience maintaining an ISO 27001-compliant ISMS
• Experience with information security management and training programmes
• Strong knowledge of ISO 27001:2022, NIS2, AI Act, GDPR and related regulations
• Experience conducting third-party risk assessments using ISO 27001 (essential) and ISO 31000 (desirable)
• Hands-on gap analysis, testing controls, and audits
• Data classification standards and security awareness delivery across units

Responsibilities

• Maintain and continually improve the ISO 27001 ISMS across the EMEA region
• Support audits and ensure compliance with global strategies and local regulations
• Develop, implement and maintain information security policies and procedures
• Lead third-party risk assessments and risk-register maintenance
• Deliver information security awareness training across multiple business units

Skills

Information security governance

GRC

Risk assessments

Audits

Policy development

Stakeholder management

Data protection

Third-party risk

Training development

Awareness programs

Education

Degree-level qualification

Job description

Talantir in Hatfield is seeking an Information Security Compliance Analyst to support the ISO 27001:2022 ISMS, risk governance, and regulatory compliance across the EMEA region. The role collaborates with technical teams, stakeholders, and leadership to embed robust information security controls.

You will maintain compliance with NIS2, AI Act, GDPR, and data protection laws, lead audits, conduct risk assessments, and drive security awareness programs across business units.