IT Information Security Analyst - Compliance

Adecco; West Midlands; Hybrid; GBP 45,000 - 55,000; Part time

Job summary

A recruitment agency is seeking an IT Information Security Analyst - Compliance in the West Midlands. The role involves maintaining compliance with ISO 27001, monitoring cyber events, and conducting security awareness training. Ideal candidates should have around five years of relevant experience and strong knowledge of compliance standards. This position offers a part-time contract and the flexibility of hybrid working arrangements, providing an exciting opportunity in the field of cybersecurity.

Qualifications

• Approximately five years’ experience in an Information Security Analyst or similar role.
• Strong working knowledge of ISO 27001 and audit cycles.
• Experience with SIEM and investigative processes.

Responsibilities

• Support and maintain compliance with ISO 27001.
• Proactively monitor cyber events using SIEM technologies.
• Deliver security awareness activities across the organisation.

Skills

ISO 27001 compliance

Communication skills

Organizational skills

Risk management

Vulnerability management

Education

ISO 27001 Lead Auditor or Lead Implementer

NIST CSF Practitioner

CRISC

CEH

CompTIA CySA+

Tools

SIEM

EDR

SDR

Job description

IT Information Security Analyst - Compliance

Salary: £45,000 - £55,000 (DOE)
Contract: Fixed Term Contract
Travel: Some travel to client sites required
Location: West Midlands or Yorkshire / Hybrid

A fantastic opportunity has arisen for an IT Information Security Analyst to join a respected professional services organisation with a strong heritage in delivering expert consultancy across complex, regulated environments. This role is ideal for someone passionate about cybersecurity compliance, audit readiness, and maintaining robust security standards across the business.

Seniority level

Mid‑Senior level

Employment type

Part‑time

Job function

Information Technology

Industries

Data Security Software Products

Key Responsibilities

• Security Compliance & Governance
  • Support and maintain compliance with ISO 27001, contributing to the operation, monitoring, and continual improvement of the ISMS.
  • Ensure alignment with wider frameworks such as NIST CSF, Cyber Essentials / Cyber Essentials Plus, and organisational GRC policies.
  • Assist with internal and external audits, evidence gathering, non‑conformity remediation, and compliance documentation.
  • Help ensure compliance with legal, regulatory, and contractual requirements relating to data protection, risk, supplier oversight, and information governance.
• Monitoring & Investigation
  • Proactively monitor cyber events using SIEM technologies, initiating investigations where anomalies or threats are detected.
  • Support deeper incident reviews, escalating where required to senior InfoSec or the SOC.
  • Participate in regular vulnerability scanning and technical compliance checks.
• Training & Awareness
  • Deliver security awareness activities across the organisation, supporting ISO 27001 competence and awareness controls.
  • Promote a strong security culture, encouraging best‑practice behaviours and reporting of risks.
• Operational Security Activities
  • Support vulnerability management, risk assessments, and maintenance of risk registers.
  • Assist technical teams in aligning projects and changes with required compliance controls and security baselines.

Ideal Candidate Profile

• Approximately five years’ experience in an Information Security Analyst, Cyber Compliance Analyst, or similar InfoSec compliance role.
• Strong working knowledge of ISO 27001, GRC processes, audit cycles, risk management, and documentation control.
• Experience with SIEM, EDR, SDR, and investigative processes.
• Understanding of vulnerability management and penetration testing concepts.

Skills & Attributes

• Confident interpreting and applying standards such as ISO 27001, NIST, and Cyber Essentials.
• Excellent communication skills suited to a professional services environment.
• Highly organised with the ability to maintain accurate compliance evidence, logs, and documentation.
• Able to travel occasionally to client sites.

Qualifications (Desirable)

• ISO 27001 Lead Auditor or Lead Implementer
• NIST CSF Practitioner
• CRISC (Certified in Risk and Information Systems Control)
• CEH (Certified Ethical Hacker)
• CompTIA CySA+
• ISO 27701 Practitioner
• GIAC certifications (e.g., GSEC, GCIH, GMON)

Adecco operates as an Employment Agency and is an equal opportunities employer.