Junior Cyber Governance Analyst – Global Impact

Commify-Group; Nottingham; On-site; GBP 30,000 - 35,000; Full time

Benefits offered by this job

Competitive salary

Company bonus scheme

Healthcare cash plan

27 days annual leave

Wellbeing leave

Birthday off

Pension 5%

Death in service 4x

Annual award recognition

Social events

Training & development

Job summary

Commify is seeking a Graduate Cyber Governance Analyst to support our Cyber Security team. You will work directly with the Cyber Security Manager and gain multi-territory exposure across 20+ global compliance frameworks.

The role focuses on evidence management, risk action tracking, control testing, and policy communication to keep our security program strong. Ideal candidates are eager to learn, detail-oriented, and prepared to pursue a long-term career in cyber security, risk, and compliance,

Qualifications

• Degree related to cyber security.
• Clear written and spoken English with ability to collaborate with technical and non-technical colleagues.
• Genuine enthusiasm for cyber governance, cyber security, risk or compliance and willingness to learn.
• Eligible to work in the UK.
• Familiarity with cyber governance frameworks or standards and GRC tools is a bonus.

Responsibilities

• Source, collect and maintain audit-ready evidence for ISO 27001, PCI DSS, SOC 2 and Cyber Essentials.
• Help manage the technology risk register with many action items.
• Execute routine security tests to ensure policy adherence.
• Work with SCF to map evidence and standardise control responses.
• Assist in security awareness training and phishing simulations.
• Support rollout and tracking of information security policies across teams.

Skills

English communication

Collaboration

Cyber governance interest

Education

Degree in cyber security

Job description

Commify is seeking a Graduate Cyber Governance Analyst to support our Cyber Security team. You will work directly with the Cyber Security Manager and gain multi-territory exposure across 20+ global compliance frameworks.

The role focuses on evidence management, risk action tracking, control testing, and policy communication to keep our security program strong. Ideal candidates are eager to learn, detail-oriented, and prepared to pursue a long-term career in cyber security, risk, and compliance,