Information Security Governance and Compliance Analyst

Reference: sdetstlvswgyu26w4jz4

We are seeking an Information Security Governance and Compliance Analyst to support the development, implementation, and continuous improvement of information security governance and compliance practices. This role will help ensure that policies, standards, procedures, and controls are aligned with business objectives, regulatory obligations, and recognised security frameworks. The successful candidate will work closely with technology, risk, legal, privacy, audit, and business stakeholders to promote a consistent and effective approach to information security.

Key responsibilities include maintaining the information security policy and control framework; coordinating compliance assessments, internal reviews, and external audits; monitoring regulatory and industry developments; and supporting the remediation of identified risks and control gaps. You will collect and analyse evidence, prepare clear reports for management, maintain risk and compliance registers, and track corrective actions through to completion. The role will also contribute to security awareness initiatives, third-party risk reviews, exception management, business continuity activities, and the development of governance metrics and dashboards.

Applicants should have experience in information security governance, risk, compliance, audit, or a related discipline, together with a sound understanding of security frameworks such as ISO 27001, NIST, COBIT, or equivalent standards. Familiarity with privacy obligations, risk assessment methodologies, control testing, policy management, and audit processes is highly desirable. Strong analytical, written, and verbal communication skills are essential, as is the ability to translate technical and regulatory requirements for a range of audiences. Relevant qualifications or certifications, such as ISO 27001, CISA, CISM, CRISC, or equivalent experience, will be advantageous. You should be organised, detail-oriented, collaborative, and confident working independently while managing multiple priorities.

COMPETITIVE SALARY
Added 06/10/2026
Reference: sdetstlvswgyu26w4jz4

Information Security Governance and Compliance Analyst

York, England, United Kingdom Permanent Governance and Compliance

Other similar jobs

Information Security Governance, Risk and Compliance Lead

Added 09/10/2026

We are seeking an experienced Information Security Governance, Risk and Compliance Lead to strengthen and mature our organisation’s information security framework. This role will provide strategic leadership across governance, risk management and regulatory compliance, helping to protect sensitive information, support business objectives and promote a strong security culture. You will work closely with technology, legal, privacy, audit, procurement and operational teams to ensure security requirements are understood, implemented and continuously improved. Key responsibilities will include developing and maintaining information security policies, standards, procedures and control frameworks; leading regular information security risk assessments and overseeing the treatment of identified risks; coordinating...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 09/09/2026

An opportunity is available for an Information Security Governance, Risk, and Compliance (GRC) Specialist to support the development, implementation, and continuous improvement of information security governance and risk management practices. The successful candidate will help ensure that security policies, controls, and processes align with business objectives, regulatory obligations, and recognised industry frameworks. This role will work closely with technology, operational, legal, privacy, and business stakeholders to promote a consistent and effective approach to managing information security risk. Key responsibilities will include maintaining information security policies, standards, procedures, and control documentation; coordinating risk assessments and tracking remediation activities; supporting internal and...

Learn more

Information Security Governance, Risk, and Compliance (GRC) Specialist

Added 18/08/2026

We are seeking a dedicated Information Security Governance, Risk, and Compliance (GRC) Specialist to join our team. In this role, you will be responsible for developing and maintaining the organization's information security policies and procedures, ensuring compliance with applicable regulations and standards. You will conduct risk assessments, identify vulnerabilities, and implement effective mitigation strategies to protect sensitive data. Collaborating with cross-functional teams, you will lead initiatives to enhance the organization’s overall security posture and ensure that all security measures align with business objectives. Your expertise will be crucial in conducting regular audits and assessments to evaluate the effectiveness of current...

Learn more

Group AI Governance, Risk and Compliance Manager (DPO)

Added 15/10/2026

We are seeking an experienced Group AI Governance, Risk and Compliance Manager (DPO) to lead the development and implementation of a robust framework for the responsible, lawful and secure use of artificial intelligence across a complex, multi-jurisdictional organisation. This is a senior role requiring strong expertise in data protection, AI regulation, information governance and enterprise risk management, together with the ability to translate evolving requirements into practical business controls. You will establish and maintain AI governance policies, standards, procedures and assurance processes, ensuring that AI systems are appropriately assessed, documented, monitored and reviewed throughout their lifecycle. Key responsibilities will include...

Learn more

Cybersecurity Governance, Risk and Compliance

Added 06/10/2026

We are seeking an experienced Cybersecurity Governance, Risk and Compliance professional to strengthen the organisation’s information security framework and support the effective management of cyber risk. This role will help ensure that security policies, controls and processes align with business objectives, regulatory obligations and recognised industry standards. You will work closely with technology, legal, privacy, audit and business stakeholders to promote a consistent, risk-based approach to cybersecurity. Key responsibilities will include maintaining and improving cybersecurity governance frameworks, policies, standards and procedures; coordinating enterprise-wide risk assessments; tracking remediation activities; and preparing clear reports for senior leadership and relevant governance committees. You...

Learn more

Compliance, Governance & Information Security Work Experience

Added 01/09/2026

An exciting work experience opportunity is available for an individual interested in compliance, governance and information security. This placement is designed to provide practical exposure to the systems, processes and professional standards that help organisations manage risk, protect information and meet legal and regulatory obligations. You will gain insight into how policies are developed, implemented and reviewed, while learning how effective governance supports confident business decision-making. Responsibilities may include assisting with the maintenance of compliance records, reviewing policies and procedures, supporting risk assessments, and helping to monitor actions arising from audits or internal reviews. You may also contribute to information...

Learn more

Compliance, Governance & Information Security Work Experience

Added 01/09/2026

We are seeking a motivated individual to join a work experience opportunity focused on compliance, governance and information security. This role is designed for someone who wants to gain practical insight into how organisations manage risk, protect information and maintain effective controls. You will work alongside experienced professionals and develop an understanding of the policies, processes and standards that support responsible business operations. Your responsibilities may include assisting with the review and maintenance of internal policies, procedures and governance documents; helping to monitor compliance activities and track actions to completion; supporting risk assessments and control testing; and contributing to the...

Learn more

Senior IT Cyber Governance, Risk & Compliance Analyst

Added 18/08/2026

We are seeking a highly skilled Senior IT Cyber Governance, Risk & Compliance Analyst to join our dynamic team. In this role, you will be responsible for developing, implementing, and maintaining an effective governance, risk management, and compliance framework to ensure the organization meets all regulatory requirements and industry standards. You will conduct thorough risk assessments, identify vulnerabilities, and recommend appropriate mitigation strategies. Additionally, you will collaborate with cross-functional teams to enhance cybersecurity policies and procedures, ensuring alignment with overall business objectives. The ideal candidate will have a strong background in IT security, risk management, and compliance, with a proven...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead and strengthen the organisation’s information security governance, risk management and compliance programmes. This role will help ensure that security practices support business objectives while meeting regulatory, contractual and industry requirements. You will work closely with technology, legal, privacy, internal audit and operational teams to establish effective controls, promote security awareness and provide clear, practical advice on managing information and cyber risk. Key responsibilities will include maintaining and improving security policies, standards, procedures and control frameworks; coordinating enterprise security risk assessments; managing risk registers, treatment plans and exception...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking a Security Governance, Risk & Compliance Manager to lead and strengthen the organisation’s information security governance, risk management and compliance activities. This is a key role responsible for ensuring that security policies, controls and processes are aligned with business objectives, regulatory requirements and recognised industry standards. You will work closely with technology, legal, privacy, audit, operational and senior leadership teams to promote a strong, practical and risk-aware security culture. Your responsibilities will include developing, maintaining and communicating security policies, standards and procedures; managing the information security risk register; coordinating risk assessments and control reviews; and monitoring the...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead the development and continuous improvement of information security governance, risk management and compliance practices. This role will help strengthen organisational resilience, protect sensitive information and ensure that security activities align with business objectives, regulatory obligations and recognised industry standards. You will work closely with technology, legal, privacy, audit and business stakeholders to promote a consistent, risk-based approach to security. Key responsibilities will include maintaining security policies, standards, procedures and control frameworks; managing information security and technology risk assessments; overseeing risk registers, treatment plans and exception processes; and...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead the development, implementation and continuous improvement of information security governance and risk management practices. This role will help strengthen organisational resilience, support regulatory compliance and ensure that security controls are aligned with business objectives. You will work closely with technology, legal, privacy, audit, procurement and operational teams to embed effective security practices across the organisation. Key responsibilities include maintaining and improving security policies, standards, procedures and control frameworks; managing enterprise security risk assessments and treatment plans; coordinating internal and external audits; monitoring compliance with relevant legislation, regulations...

Learn more

Security Governance, Risk & Compliance Manager

Added 13/10/2026

We are seeking an experienced Security Governance, Risk & Compliance Manager to lead and strengthen the organisation’s information security governance, risk management and compliance programmes. This role will provide strategic direction while working closely with technology, legal, privacy, internal audit and business teams to ensure security controls support operational objectives and regulatory obligations. You will help promote a strong culture of security, accountability and continuous improvement across the organisation. Key responsibilities will include developing and maintaining security policies, standards, procedures and control frameworks; managing information security and technology risk assessments; maintaining risk registers and overseeing mitigation plans; and coordinating internal...

Learn more

Senior Cyber Security Governance, Risk & Compliance (GRC) Engineer

Added 17/09/2026

We are seeking a Senior Cyber Security Governance, Risk & Compliance (GRC) Engineer to strengthen enterprise-wide security governance and support the continuous improvement of cyber risk management practices. This role will provide expert guidance across security frameworks, policies, controls and assurance activities, helping to ensure that technology, business processes and third-party services meet regulatory, contractual and organisational requirements. Key responsibilities include developing, maintaining and reviewing information security policies, standards and procedures; conducting risk assessments and control reviews; supporting audit and compliance programmes; and tracking remediation activities through to completion. You will coordinate evidence gathering, prepare clear reports for senior stakeholders,...

Learn more

Security Governance, Risk, Compliance Lead

Added 18/08/2026

We are seeking a dynamic and experienced Security Governance, Risk, Compliance Lead to enhance our organization's security framework. In this role, you will be responsible for developing, implementing, and maintaining security governance policies and procedures that align with industry standards and regulatory requirements. You will lead risk assessments to identify potential vulnerabilities, ensuring that appropriate measures are in place to mitigate risks and protect sensitive information. Collaborating with cross-functional teams, you will facilitate compliance audits and ensure adherence to relevant laws and regulations, providing guidance on best practices in security and risk management. The ideal candidate will have a strong...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.