Security & Data Privacy Analyst (ISO 27001/SOC 2)

Interact Software; Manchester; On-site; GBP 45,000 - 65,000; Full time

Job summary

Interact Software in Manchester seeks an Information Security & Data Protection Analyst to strengthen the information security and data protection framework, maintaining ISO 27001, SOC 2, Cyber Essentials and UK GDPR compliance.

You will work with technical and business teams to identify and mitigate risks, lead audits, and drive governance improvements while balancing security with commercial priorities.

Qualifications

• 2-3 years minimum in an information security or data protection role.
• Hands-on experience with at least two certification cycles (ISO 27001, SOC 2, etc.).
• Demonstrable experience managing or influencing stakeholders at a senior level.
• Involvement in penetration testing activities and remediations.
• Experience handling real security incidents or data breaches.
• Ability to pragmatically balance security risk against business need.
• Maintenance and creation of the Risk Register, ROPA & DPIAs
• Strong awareness of the GDPR, either through training from working within a business that processes personal data or independent learning.
• Practical working knowledge of Defender, Intune, Entra, Purview, AWS and Azure

Responsibilities

• Creating, reviewing and improving the security policies.
• Implement and maintain Information Security Management System (ISO27001 certification)
• Contribute to activities towards certification/compliance to security. standards and regulations (ISO 27001, SOC 2, Cyber Essentials, etc.)
• Experience of undergoing audits
• Support progress on business continuity plans and policy
• Build and maintain relationships with technical and business stakeholders.
• Leading regular risk assessments and internal process audits.
• Working with internal teams and stakeholders to manage risks, suggest solutions, and resolving issues.
• Support and lead with evidence collation for audits.
• Conduct vendor/supplier reviews in line with Internal Policy.
• Experience in completing client security questionnaires for prospects and customers
• Maintain and improve information security awareness within the business.
• Conduct monitoring activities as required with the UK GDPR and other data protection laws, again our data protection policies
• Work with regulator investigations as required in Article 36
• Point of contact to our employees and individuals about data processing activities.
• Supporting the business maintaining the Security tickets through prompt follow-up and resolution, in collaboration with teams and other stakeholders.
• Management of penetration testing remediations.

Skills

Security governance

Certification cycles

Stakeholder management

Penetration testing

Incident response

Risk assessment

GDPR awareness

Cloud platforms (AWS/Azure)

Security tooling (Defender/Intune/Ensa

Tools

Defender

Intune

Entra

Purview

AWS

Azure

Job description

Interact Software in Manchester seeks an Information Security & Data Protection Analyst to strengthen the information security and data protection framework, maintaining ISO 27001, SOC 2, Cyber Essentials and UK GDPR compliance.

You will work with technical and business teams to identify and mitigate risks, lead audits, and drive governance improvements while balancing security with commercial priorities.