Senior Information Security & Compliance Lead (Hybrid)

MWH Treatment Limited; Hattersley; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

MWH Treatment is seeking a Senior Information Security & Compliance Analyst based at the Hattersley office with hybrid working. You will support governance, operation and continuous improvement of information security and data protection, acting as deputy DPO and partnering with stakeholders across the group.

You will work with the Cyber Security team and external consultants to assess risks, develop mitigations and ensure privacy controls are in place, contributing to ISO27001 certification

Qualifications

• Some experience in information security, data privacy, IT governance, or related technical/analytical role.
• Experience supporting audits, security operations, or compliance programmes would be beneficial.
• Experience in a technology-driven or data-sensitive environment preferred.
• Understanding of cloud security, IT operations, and system administration advantageous.

Responsibilities

• Act as deputy Data Protection Officer and provide day-to-day privacy guidance.
• Assist in policy and guidance development and privacy input for operational decisions.
• Maintain Records of Processing Activities (RoPA) and support DSAR responses.
• Coordinate searches, redactions and privacy investigations; ensure statutory deadlines are met.
• Contribute to security incident response planning, incident management and investigations.
• Engage with audits, insurers, regulators and external consultants on security and privacy matters.
• Help respond to tenders with technical privacy and security questions.

Skills

Information security

Data privacy

IT governance

Audits

Security operations

Compliance programmes

Cloud security

Education

ISO27001 Internal Auditor

CompTIA Security+

CISM/CIPM/CIPP (in progress)

Tools

ISO27001

NIST

CIS Controls

Job description

MWH Treatment is seeking a Senior Information Security & Compliance Analyst based at the Hattersley office with hybrid working. You will support governance, operation and continuous improvement of information security and data protection, acting as deputy DPO and partnering with stakeholders across the group.

You will work with the Cyber Security team and external consultants to assess risks, develop mitigations and ensure privacy controls are in place, contributing to ISO27001 certification