Job Search

We are seeking a Cyber Security Compliance Officer to support the development, maintenance and continuous improvement of information security compliance across the organisation. This role will help ensure that security policies, processes and controls meet applicable legal, regulatory and industry requirements, while supporting a strong culture of risk awareness and good security practice.

You will monitor changes in relevant legislation, regulations, standards and contractual obligations, assessing their impact on security controls and business operations. Working with colleagues across technology, risk, legal and operational teams, you will help maintain compliance frameworks, policies, procedures, standards and records. You will also coordinate scheduled reviews and ensure that required actions are clearly documented, assigned and tracked through to completion.

Key responsibilities will include supporting internal and external audits, preparing evidence, responding to information requests and monitoring remediation activity. You will conduct compliance assessments, control reviews and risk-based checks, identifying weaknesses and recommending practical improvements. The role will also involve maintaining compliance registers, producing management information and reporting on key risks, control effectiveness, audit findings and outstanding actions.

You will contribute to the review of third-party security arrangements, including supplier due diligence, assurance questionnaires and ongoing monitoring. In addition, you may support security awareness initiatives, policy communications, incident reviews and the development of guidance for colleagues. The role requires you to translate complex compliance requirements into clear, proportionate and achievable actions.

We are looking for experience in information security, cyber security governance, risk or compliance, together with a sound understanding of recognised security frameworks and data protection principles. Experience of audit preparation, control testing, risk assessment and evidence management is highly desirable. Relevant professional qualifications, such as ISO 27001, CISM, CRISC or equivalent experience, would be advantageous.

You will be organised, analytical and confident engaging with stakeholders at all levels. Strong written and verbal communication skills, attention to detail and the ability to manage competing priorities are essential. In return, you will have the opportunity to make a meaningful contribution to the organisation’s security and resilience while developing your professional expertise.