Security Compliance Analyst

Cognisys; Remote; GBP 14,000 - 19,000; Full time

Job summary

A cybersecurity firm is looking for a Security Compliance Analyst to join their GRC team. This entry-level role is perfect for candidates with 1-3 years' experience in security or compliance and an eagerness to expand their expertise. The position involves supporting GRC engagements, implementing security controls, and collaborating with clients to enhance their security posture. With a strong emphasis on professional development, this role promises excellent opportunities for learning and growth in a dynamic team environment.

Benefits

25 days annual leave plus bank holidays

Paid leave on your Birthday

Health and Wellbeing benefits

£2,000 annual training budget

Refer a friend bonus scheme

Qualifications

• 1–3 years’ experience in security, compliance, risk, or IT governance.
• Understanding of compliance frameworks like ISO 27001, SOC 2, NIST.
• Interest in cybersecurity and compliance consulting.

Responsibilities

• Support delivery of GRC consulting engagements.
• Assist with implementing security controls aligned to frameworks.
• Help clients gather evidence for compliance and audit readiness.
• Contribute to client documentation.

Skills

Attention to detail

Strong organisational skills

Good communication skills

Proactive attitude

Job description

Location: Panama (Remote)

Salary: $20,000 - $25,000 (USD)

We have an exciting opportunity to join our GRC team as a Security Compliance Analyst at a time of rapid growth and innovation at Cognisys.

Cognisys is a leading cybersecurity company specialising in Penetration Testing, GRC Consulting, and Managed Security services. We pride ourselves on our customer service, forward‑thinking approach, and commitment to excellence. Our small but mighty team works with some of the best‑known companies in the world and covers over 30 countries worldwide!

About the Role

Our GRC Consulting practice helps organisations strengthen their security posture and achieve compliance through clear, structured, and practical guidance. We work with clients at different stages of maturity, supporting them as they build strong security foundations and progress towards sustainable compliance.

We are seeking a Security Compliance Analyst to join our GRC Consulting team. This is a junior, delivery‑focused role, ideal for someone with a couple of years’ experience in security, compliance, or risk who is looking to deepen their expertise and grow as a consultant.

As a Security Compliance Analyst, you will support the delivery of GRC engagements across a range of clients. You will work closely with senior consultants and Team Leads, gaining hands‑on experience in real‑world compliance projects while building strong technical and consulting skills. This role offers excellent exposure to frameworks such as ISO 27001, SOC 2, and related standards, alongside modern security tooling and platforms.

This position suits someone who is curious, organised, and eager to learn, with a genuine interest in cyber security, compliance, and helping organisations improve their security maturity.

Key Responsibilities

Client Delivery & Support

• Support the delivery of GRC consulting engagements under the guidance of senior consultants and Team Leads.
• Assist with implementing and maintaining security controls aligned to frameworks such as ISO 27001, SOC 2, and NIST.
• Help clients gather, structure, and maintain evidence for compliance and audit readiness.
• Contribute to client documentation such as policies, procedures, risk registers, and control mappings.
• Participate in client meetings and workshops, building confidence in client‑facing delivery.
• Support ongoing compliance activities, including control monitoring, evidence reviews, and readiness assessments.

Compliance & Technical Development

• Develop a strong understanding of security and compliance frameworks and how they apply in real organisations.
• Work with compliance platforms and tooling to support control implementation and evidence management.
• Learn how to assess security posture, identify gaps, and support remediation planning.
• Build confidence in interpreting standards and translating requirements into practical actions for clients.

Quality & Consistency

• Ensure work is accurate, well‑structured, and aligned with internal delivery standards.
• Follow established playbooks, templates, and delivery processes.
• Seek feedback and guidance to continuously improve the quality of your output.
• Contribute to maintaining high standards across client deliverables.

Team Collaboration

• Work collaboratively with other analysts and consultants to deliver high‑quality client outcomes.
• Share knowledge, ask questions, and actively engage in learning opportunities within the team.
• Support a positive, inclusive, and professional team culture.

Operational Support & Improvement

• Assist in improving templates, documentation, and delivery processes as the team evolves.
• Identify small opportunities to make delivery more efficient or clearer for clients and the team.
• Contribute to building a strong, repeatable consulting delivery model.

Requirements

• 1–3 years’ experience in a security, compliance, risk, or IT governance role.
• Basic understanding of one or more compliance frameworks such as ISO 27001, SOC 2, NIST, or similar.
• An interest in cyber security, risk management, and compliance consulting.
• Strong organisational skills and attention to detail.
• Good written and verbal communication skills, with the ability to explain technical concepts clearly.
• A proactive attitude and willingness to learn from more experienced consultants.
• Ability to manage multiple tasks and priorities in a structured way.
• A collaborative mindset and a desire to grow within a consulting environment.

If you think you can deliver but don't match the criteria above, please don't be put off. We are very open‑minded and focus on ability and attitude above skills.

What We Offer

● Annual Leave: 25 days per year, plus UK bank holidays.

● Additional Leave: 1 day of paid leave on your Birthday!

● Health & Wellbeing: Access to Westfield Health Care Cash Plan and our Employee Mental Health and Wellbeing platform.

● Professional Development: £2,000 annual training budget to support your continued learning and career growth.

● A dynamic and supportive work environment where customer care and innovation drive everything we do.

● Refer a friend bonus scheme, up to £2,000!

Why Join Us?

At Cognisys, you will be part of a collaborative and innovative team that values your input and shares support. You'll have the opportunity to work on challenging projects that make a real impact for our clients. We'd love to hear from you if you want to challenge, lead and innovate!

We're not just about the work; we're about the people. Join a team where innovation is celebrated, and your contributions are valued. We foster a collaborative environment where fresh ideas thrive, and professional growth is encouraged.

Applications

Please feel free to reach out to Dom, our Head of Talent Acquisition, if you would like any further information, to discuss accessibility requirements, or if you require this information provided in an alternative format – [e-mail]

We welcome applications from candidates from a range of diverse backgrounds and can make various reasonable adjustments to consider individual needs.

NO RECRUITMENT AGENCIES, PLEASE