Information Security Compliance Analyst

Consortium of Lesbian, Gay, Bisexual and Transgender Voluntary and Community Organisations Limited; Hatfield; Hybrid; GBP 60,000 - GBP 80,000; Full time

Job summary

A leading community organisation in Hatfield is seeking an Information Security Compliance Analyst for a 12-month fixed-term contract. The role involves ensuring compliance with information security standards and regulations, including GDPR and ISO 27001. Candidates should have a degree or equivalent, relevant certifications, and experience in Information Security and Risk Management. Hybrid working options are available, along with a competitive benefits package, including bonuses and well-being programs.

Benefits

Hybrid working

Discretionary Bonus

Learning and development opportunities

Well-being & mental health awareness programmes

Qualifications

• Degree level qualified or equivalent - essential.
• CISM and/or CISSP or other relevant certification is highly desirable.
• Demonstrable experience in an Information Security, IT Governance, Risk and Compliance role.

Responsibilities

• Support the development and maintenance of the EMEA information security management system.
• Maintain ISO 27001:2022 certification and ensure adherence to regulations.
• Conduct information security risk assessments and develop policies.

Skills

Information Security

Risk Management

Stakeholder Management

ISO 27001 Compliance

GDPR Knowledge

Education

Degree level qualification or equivalent

Tools

ISO 27001:2022

CISM Certification

CISSP Certification

Job description

Overview

Information Security Compliance Analyst - 12 Month Fixed Term Contract (Salaried)

Role summary

Information Security Compliance Analyst role. Supporting the EMEA information security management system and ensuring compliance with global and regional requirements.

Responsibilities

• Support the development and maintenance of the EMEA information security management system, ensuring alignment with Global EIT strategy, EMEA business needs, and relevant legislation (e.g., NIS 2, AI Act, GDPR).
• Maintain ISO 27001:2022 certification and ensure adherence to health, safety, financial, and privacy regulations.

What we are looking for

• Degree level qualified or equivalent - essential.
• CISM and/or CISSP or other relevant certification is highly desirable.
• ISO 27001:2022 Lead Implementer / Auditor certification is highly desirable.
• Demonstrable experience in an Information Security, IT Governance, Risk and Compliance based role, including maintaining and continually improving an ISO 27001 compliant management system.
• Experience of information security management and/or security awareness.
• Good knowledge of industry standard frameworks and best practices – ISO 27001:2022, NIS2, AI Act etc. and their practical application in a corporate environment to ensure all elements of integrity, availability and confidentiality are adhered to.
• Extensive experience conducting information security risk assessments, reporting risks.
• Experience of developing, implementing, managing, and maintaining information security policies, guidance, & procedures.
• Experience of risk management and maintaining risk registers.
• Knowledge & experience of risk assessments against third-party organisations based on IT control frameworks such as ISO 27001 (essential) and ISO 31000 (desirable).
• Practical experience of conducting gap analysis, testing information security processes, procedures, plans and support audits to achieve compliance with Information Security standards.
• Practical experience of establishing and maintaining data classification standards within a corporate environment.
• Experience in developing and executing an Information Security awareness training across multi-business units.
• Experience with ensuring corporate compliance with UK/EMEA data protection legislation such as DPA and GDPR.
• Good knowledge of a broad range of IT technology platforms, products, services.
• Stakeholder management experience at both technical and non-technical to Executive level.

What we offer

• Hybrid working (Depending on role)
• Car/Car Allowance (Depending on role)
• Electric charging points for Electric/Hybrid vehicles
• Discretionary Bonus
• Free onsite parking
• Subsidised onsite restaurant and coffee shop
• Learning and development opportunities
• Well-being & mental health awareness programmes
• Multi-faith prayer room

Location

You will also be based out of our excellent EMEA Knowledge Centre (EKC) facility, which is our EU Headquarters, and offers an inclusive, and collaborative working environment.

What you need to do next

If you are interested in this position, please click ‘apply now’ at the top of this advert. Upon submitting your application, you will be asked to complete your profile and upload a copy of your CV along with any additional information to support your application.

If you have any questions, please contact us at [e-mail].

Eisai Recruitment Statement

Diverse perspectives and experiences are critical to our success, and we welcome applications from all people from all backgrounds with the experience and skills needed to perform this role. We look forward to receiving your application.

We believe that diverse and inclusive teams promote wellbeing, learning and innovation, helping Eisai serve our patients, their families, our employees, and society. Our commitment is:

• to embrace and celebrate our differences, respecting and valuing each other.
• to include equity, diversity, and inclusion practices in all that we do so everyone has a full sense of belonging.
• to value individual talent where every employee can be themselves and thrive in an environment of openness, trust, and integrity.

If this job opportunity is not suitable, then check out the other LGBT friendly jobs across UK!