Senior Information Security & Compliance Analyst

InfoSec People Ltd; Hattersley; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

25 days annual leave

Life assurance

Health insurance

Private medical insurance

Cycle to work scheme

Retail and lifestyle discounts

Job summary

InfoSec People Ltd in Greater Manchester is seeking a Senior Information Security & Compliance Analyst to lead security, privacy and governance work within critical national infrastructure projects.

You will partner with the Information Security & Compliance Manager to drive ISO 27001 certification efforts, conduct risk assessments, maintain RoPA, review supplier security and support audits, DSAR responses and privacy investigations.

Qualifications

• Experience supporting information security or compliance programmes.
• Knowledge of ISO 27001, NIST or similar frameworks.
• Understanding of UK GDPR and Data Protection legislation.
• Experience conducting risk assessments and managing compliance activities.

Responsibilities

• Act as trusted adviser to stakeholders to embed security, privacy and governance controls.
• Support ISO 27001 programme and compliance activities.
• Conduct risk assessments and maintain security risk registers.
• Review suppliers and third-party security risks.
• Support security incident management and investigations.
• Assist with business continuity and resilience activities; develop and maintain security policies.

Skills

ISO 27001

NIST

GDPR

Risk assessments

Stakeholder engagement

DPO duties

Regulated environments

Security frameworks

Data protection

Education

ISO 27001 Internal Auditor certification

Job description

Senior Information Security & Compliance Analyst

Greater Manchester | Hybrid Working

We're partnering with a leading organisation in the UK water and infrastructure sector to appoint a Senior Information Security & Compliance Analyst.

This is an excellent opportunity for an information security, governance, risk or privacy professional looking to take on a highly visible role within a business supporting Critical National Infrastructure projects across the UK.

Working closely with the Information Security & Compliance Manager, you'll help drive information security, privacy and compliance activities whilst supporting the company's journey towards ISO 27001 certification.

The Role

You'll act as a trusted adviser to stakeholders across the business, helping ensure robust security, privacy and governance controls are embedded into day-to-day operations.

Key responsibilities include:

• Supporting the organisation's ISO 27001 programme and compliance activities
• Conducting risk assessments and maintaining security risk registers
• Reviewing suppliers and third-party security risks
• Supporting security incident management and investigations
• Assisting with business continuity and resilience activitiesDeveloping and maintaining security policies and guidance
• Supporting audits, regulatory reviews and client assurance requests
• Acting as Deputy Data Protection Officer when required
• Maintaining Records of Processing Activities (RoPA)
• Supporting DSAR responses and privacy investigations
• Providing security and privacy advice to stakeholders across the business

About You

We're keen to speak with professionals who have experience in information security, governance, risk, compliance or data protection roles.

You'll ideally bring

• Experience supporting information security or compliance programmes
• Knowledge of ISO 27001, NIST or similar frameworks
• Understanding of UK GDPR and Data Protection legislation
• Experience conducting risk assessments and managing compliance activities
• Strong stakeholder engagement and communication skills
• Experience working within regulated or data-sensitive environments
• ISO 27001 Internal Auditor certification
• Security+, CISM, CIPP or CIPM qualifications
• Business Continuity experience
• Critical National Infrastructure, utilities or infrastructure sector experience
• Knowledge of DLP, records retention or supplier assurance processes

What's On Offer?

• 25 days annual leave plus bank holidays
• Option to purchase additional holiday
• Life assurance
• Health insurance
• Private medical insurance
• Cycle to work scheme
• Retail and lifestyle discounts

Why Apply?

This role offers the chance to play a key role in shaping information security, privacy and governance within an organisation delivering nationally important infrastructure projects.