One Stop - Cyber Compliance Analyst

Tesco PLC; Clayhanger; On-site; GBP 40,000 - 50,000; Full time

Job summary

A leading retail company is seeking a Compliance Analyst to monitor compliance with cyber security standards. The role involves supporting audits, strengthening internal controls, and collaborating with teams to ensure robust security practices. Ideal candidates will have relevant qualifications such as CISA or CISSP, alongside skills in compliance monitoring and risk management. This position offers the chance to stay ahead of emerging regulations and enhance internal security policies.

Qualifications

• Strong understanding of compliance monitoring and assessment.
• Experience in maintaining cyber risk registers and reporting.
• Capability of interpreting technical risks to business risks.

Responsibilities

• Monitor and assess compliance with cyber security standards.
• Develop and enforce security policies, procedures, and controls.
• Support audits and maintain evidence for compliance.

Skills

Compliance monitoring

Internal controls development

Auditing

Cyber risk management

Analytical skills

Understanding of Cyber Security Frameworks

Ability to work in a team

Education

CISA

CISSP

Job description

Are you passionate about cyber security and risk management? Join our team as a Compliance Analyst, where you'll play a key role in monitoring compliance with cyber security standards, supporting audits, and strengthening internal controls. You'll work closely with internal and external teams to ensure robust security practices, maintain the cyber risk register, and stay ahead of emerging regulations and threat trends.

Responsibilities

• Monitor and assess compliance with cyber security standards performing second line checks.
• Help formalise and strengthen internal controls with evidence and documentation.
• Support the planning and running of internal and external audits including evidence, gathering, running interviews and remediation tracking.
• Maintain and update cyber risk register.
• Develop and enforce security policies procedures and controls.
• Track and report on controls.
• Collaborate with internal and external teams on compliance issues.
• Stay up to date with emerging cyber regulations and threat trends.
• Monitoring of security tools when required.
• Identify controls improvements.
• Understanding of Cyber Security Frameworks.
• Analytical and reporting skills.
• Experience implementing control frameworks.
• Ability to interpret technical risk to business risks.
• Experience of Cyber Security tools.
• Ability to work in a small team.

Qualifications

• CISA
• CISSP