Job Search

An exciting opportunity has arisen for an IT Senior Analyst – IT Security Compliance to support the effective management, monitoring and continuous improvement of information security and technology compliance controls. This role will help ensure that systems, processes and services meet relevant regulatory, contractual and internal requirements, while contributing to a strong culture of security and risk awareness.

You will work with technology teams, risk specialists and business stakeholders to assess compliance obligations, document control frameworks and coordinate evidence gathering for internal and external audits. Responsibilities will include conducting control reviews, identifying gaps, tracking remediation activity and preparing clear reports for senior stakeholders. You will also support risk assessments, policy reviews, exception management and the development of practical recommendations to improve security and compliance outcomes.

The role will involve maintaining accurate records of risks, controls, actions and audit evidence, as well as monitoring changes to legislation, standards and industry expectations. You may contribute to security awareness initiatives, supplier assurance reviews, incident investigations and the implementation of governance processes across IT. Strong attention to detail and the ability to challenge constructively will be essential when reviewing processes and assessing whether controls are operating effectively.

Applicants should have proven experience in IT security, technology risk, compliance, audit or a closely related discipline. A sound understanding of information security principles, risk management and recognised frameworks such as ISO 27001, NIST or COBIT is desirable. Experience of working with audit teams, control testing, regulatory requirements and governance reporting would be advantageous.

You will need excellent written and verbal communication skills, strong analytical ability and confidence engaging with colleagues at all levels. The successful candidate will be organised, pragmatic and capable of managing competing priorities while maintaining high standards of accuracy and confidentiality. Relevant professional qualifications, such as CISA, CISSP, CRISC, ISO 27001 Lead Implementer or equivalent experience, would be welcomed.