Security and Compliance Analyst

The Security & Compliance Analyst is a key member of the IT team, working closely with the Head of Cyber Security to strengthen organisational cyber resilience. The role is assurance-led: the analyst runs the day-to-day audit and compliance programme, coordinates vulnerability remediation with platform owners, evidences the effectiveness of technical controls (including identity, endpoint and cloud), and provides second-line cover for security tickets escalated by Helpdesk. The analyst liaises with internal audit, providing reports, evidence and status updates on control assurance and remediation, ensuring audit requirements are met and findings addressed in a timely, transparent manner.

The successful candidates will have the following:

• Significant demonstrable experience in a security, IT audit, compliance or technical IT role.
• Methodical and well-organised, with strong documentation habits; willing to ask questions and learn quickly.
• Clear written and verbal communication; able to translate technical findings into evidence, actions and outcomes for non-technical stakeholders.
• An understanding of how cyber security risk is identified, assessed and managed.
• Practical experience of audit and compliance work against a recognised security framework (e.g. CAF, ISO 27001, Cyber Essentials Plus), and an understanding of how it translates into practical controls and evidence.

If that sounds like you, then we would love to hear from you!

The closing date for the receipt of a completed application is Monday 2nd November 2026 at 12 noon.