Security Analyst: ISMS & Compliance (Hybrid Bristol)

Applicable Limited; West of England; Hybrid; GBP 36,000 - 60,000; Full time

Benefits offered by this job

25 days holiday (plus bank holidays)

Company pension

Income Protection

Health Cash Plan

Death in Service (4 x salary)

Volunteer Day

Job summary

Applicable Limited is seeking a Security Analyst in Bristol for a full-time, office-based role with some hybrid working. You will support governance, risk, and technical security activities, helping maintain and mature the ISMS and ensure ongoing compliance with industry standards.

Start date mid/late October 2026, 37.5 hours per week. You will work with DevOps and Product teams to implement security controls, coordinate audits, and keep ISMS documentation up to date.

Qualifications

• Microsoft AZ-900 certification is required.
• CompTIA Security+ certification is required.
• ISC Certified in CyberSecurity (CC) is desirable.
• Good communication skills are essential.
• Experience in enterprise IT environments is required.
• Excellent attention to detail and a strong security mindset.
• Solid understanding of information security principles and technologies.
• Ability to map business needs to technical solutions.
• Strong IT security knowledge and practical experience in risk and controls.
• Strong project, analysis, problem-solving and stakeholder management skills.

Responsibilities

• Support maintenance of compliance with security standards and frameworks (ISO/IEC 27001/27017/27018, Cyber Essentials Plus).
• Coordinate evidence and participate in audits (internal and external).
• Collaborate with DevOps and Product teams to implement security controls across the development lifecycle.
• Coordinate audit-related activities and ensure documentation is accurate and audit-ready.
• Maintain and update ISMS documentation and records.

Skills

AZ900

Security+

CyberSecurity CC

Communication

Enterprise IT

Job description

Applicable Limited is seeking a Security Analyst in Bristol for a full-time, office-based role with some hybrid working. You will support governance, risk, and technical security activities, helping maintain and mature the ISMS and ensure ongoing compliance with industry standards.

Start date mid/late October 2026, 37.5 hours per week. You will work with DevOps and Product teams to implement security controls, coordinate audits, and keep ISMS documentation up to date.