Security Analyst: ISMS & Compliance (Hybrid, Bristol)

Applicable; West of England; Hybrid; GBP 38,000 - 54,000; Full time

Benefits offered by this job

25 days holiday

Company pension

Income Protection

Health Cash Plan

Death in Service (4 x salary)

Buy/Sell Holiday

Training & Development

Employee discounts

Volunteer Day

Job summary

Applicable is seeking a Security Analyst to support the Head of Information Security. The role offers exposure across governance, risk, compliance, and technical security, helping maintain the ISMS and ensure regulatory compliance. Office-based with some hybrid working in Bristol.

You’ll contribute to security initiatives, support audits, and work with DevOps/Product teams to embed secure design, build, and deployment practices. Start date mid/late October 2026, full-time permanent position.

Qualifications

• Strong communication skills and attention to detail.
• Good understanding of information security concepts and controls.
• Ability to map business needs to technical solutions.
• Solid IT security knowledge suitable for enterprise environments.

Responsibilities

• Support maintenance of ISMS documentation and audit readiness.
• Assist in security compliance activities across standards and Cyber Essentials Plus.
• Collaborate with DevOps and Product teams to implement security controls.
• Coordinate audit activities and gather evidence for internal/external audits.
• Maintain current ISMS records and documentation.

Skills

Communication skills

Attention to detail

Info security knowledge

Tech-to-business mapping

IT security understanding

Project & analytical skills

Job description

Applicable is seeking a Security Analyst to support the Head of Information Security. The role offers exposure across governance, risk, compliance, and technical security, helping maintain the ISMS and ensure regulatory compliance. Office-based with some hybrid working in Bristol.

You’ll contribute to security initiatives, support audits, and work with DevOps/Product teams to embed secure design, build, and deployment practices. Start date mid/late October 2026, full-time permanent position.