Risk & Compliance Analyst

The Opportunity Hub UK Ltd; Greater London; Híbrido; GBP 36 000 - 55 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Private medical insurance

Pension contribution

Hybrid working from London

Generous annual leave

Progression path

Resumo da oferta

The Opportunity Hub UK Ltd in London is seeking a junior to mid-level Risk & Compliance Analyst to grow in a thriving cybersecurity SME. You’ll assess risks, support audits, and maintain the risk register while ensuring policies stay current as regulations evolve.

With 1–2 years in risk/compliance, you’ll translate technical risk into plain English, collaborate with technical teams, and manage multiple audits with a proactive mindset. Hybrid working from London is offered.

Qualificações

• 1–2 years in risk, compliance, audit or related security function.
• Knowledge of ISO 27001, GDPR or NIST frameworks (certification a bonus, not required).
• Strong written communication; translating technical risk into plain English.
• Comfortable with spreadsheets, GRC tools or quick to learn them.
• Genuine curiosity about how attacks happen and how policy stops them.
• Organised enough to manage several audits and deadlines simultaneously.

Responsabilidades

• Assess and document security risks across client and internal systems and track remediation to close.
• Support audits against ISO 27001, SOC 2, Cyber Essentials and similar frameworks.
• Maintain the risk register and flag emerging threats before incidents occur.
• Write clear compliance reports for stakeholders who aren’t security experts.
• Liaise with technical teams to ensure controls are followed, not just written down.
• Keep policies current as regulation and threat landscapes shift.

Conhecimentos

ISO 27001

GDPR

NIST

Written communication

Organised

Ferramentas

GRC tools

Spreadsheets

Descrição da oferta de emprego

Perfect role for a junior/mid professional looking to grow their Cybersecurity career in London.

Cyber threats aren't slowing down, and neither is the regulation built to keep them in check. This established, growing SME in the Cybersecurity space needs a Risk & Compliance Analyst who can keep pace with both. You'd be joining a business of 51 to 250 people that's past the startup scramble but still small enough for your work to be visible and your judgement to matter.

Here's what you'll be doing:

• Assess and document security risks across client and internal systems, then track remediation through to close
• Support audits against ISO 27001, SOC 2, Cyber Essentials and similar frameworks
• Maintain the risk register and flag emerging threats before they become incidents
• Write clear compliance reports for stakeholders who don't live and breathe security jargon
• Liaise with technical teams to make sure controls are actually being followed, not just written down
• Keep policies current as regulation and threat landscapes shift

Here are the skills you'll need:

• A year or two in risk, compliance, audit or a related security function
• Working knowledge of ISO 27001, GDPR or NIST frameworks (formal certification a bonus, not a requirement)
• Sharp written communication. You'll be translating technical risk into plain English regularly
• Comfortable with spreadsheets, GRC tools, or a willingness to learn them fast
• Genuine curiosity about how attacks happen and how policy stops them
• Organised enough to manage several audits and deadlines at once without dropping the ball

Key perks and benefits:

• Salary of £36,000 to £54,500 depending on experience, plus bonus scheme
• Private medical insurance
• Pension contribution
• Hybrid working from London, with generous annual leave and flexibility around how you structure your week
• Defined progression path in a company that's still small enough to notice good work

Why pursue a career in Cybersecurity?

Every business now runs on data, and every regulator wants proof it's protected. That's not changing. London remains one of the best places in Europe to build a Cybersecurity career, with dense demand across finance, tech and professional services. Analysts who understand both the technical and the regulatory side rarely stay junior for long.