Risk & Compliance Analyst - ISO 27001, SOC 2, GDPR

Knutsford
5 months ago
Applications closed

Related Jobs

View all jobs

Cyber Risk Analyst

Information Security Analyst

Supplier Risk Analyst

GRC Analyst - Third Party Risk Management

Senior Cyber & Technology Risk Analyst

Security Consultant/Analyst

Risk & Compliance Analyst - ISO 27001, SOC 2, GDPR

Location: Knutsford (Cheshire) | Office-based
Salary: £35,000 - £45,000 DOE + benefits

About the Role

We're supporting a fast-growing technology company that delivers secure, cloud-based platforms to highly regulated enterprise clients.

They're looking for a Risk & Compliance Officer / Analyst to play a key part in maintaining and improving their information-security and compliance frameworks.

Working closely with senior leadership, you'll help ensure the business remains compliant with standards such as ISO 27001, SOC 2 Type II, and GDPR, while building a culture of risk awareness and continuous improvement.

Key Responsibilities

Maintain and develop compliance policies, standards, and frameworks across the organisation.
Support internal and external audits for ISO 27001, SOC 2, and data-protection regulations.
Conduct regular risk assessments and contribute to risk treatment plans.
Monitor compliance KPIs, prepare monthly status reports, and present findings to senior stakeholders.
Review vendor and third-party compliance, ensuring contractual and regulatory obligations are met.
Deliver compliance awareness and training across teams.
Provide oversight of physical-security processes, access control, and site audits. What You'll Bring

3 + years' experience in compliance, risk, or information-security roles within cloud-first or regulated environments.
Strong knowledge of ISO 27001 and SOC 2 Type II controls and audit processes.
Understanding of GDPR, data-protection, and privacy frameworks.
Practical experience supporting audit readiness, evidence gathering, and control implementation.
Excellent attention to detail, analytical thinking, and confident stakeholder communication.
Relevant certifications welcomed - CRISC, ISO 27001 Lead Implementer / Auditor, CIPP/E, GDPR Practitioner, CISM, or CISA.Why Apply?

Join a modern, compliance-driven business where security and governance are at the heart of operations.
Visible role with direct access to senior leadership and real impact on company policy and certification.
Opportunity to develop toward senior compliance or GRC management positions.
Professional, collaborative culture built around accountability, trust, and growth.

To discuss this opportunity in confidence, contact Alex Pitts at Applause IT or apply today

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Where to Advertise Cyber Security Jobs in the UK (2026 Guide)

Advertising cyber security jobs in the UK requires a different approach to most technical hiring. The candidate pool is small, heavily vetted and in high demand across government, financial services, critical national infrastructure and the private sector simultaneously. Many of the strongest candidates hold active security clearances, are not actively job-searching through general platforms, and move primarily through specialist networks and trusted referrals. General job boards reach a broad audience but lack the specificity that security professionals expect. Specialist platforms, government-affiliated channels and cleared candidate networks each serve a different part of the market. This guide, published by CybersecurityJobs.tech, covers where to advertise cyber security roles in the UK in 2026, how the main platforms compare, what employers should expect to pay, and what the data says about hiring across different role types.

Penetration Tester Jobs in the UK: What Employers Actually Want in 2026

The demand for skilled professionals in cyber security has never been higher, and penetration testers sit at the very heart of this rapidly evolving industry. As organisations across the UK continue to digitise their operations, protect sensitive data, and defend against increasingly sophisticated threats, the need for ethical hackers has grown dramatically. If you are considering a career in this field—or looking to advance within it—it is essential to understand what employers are really looking for in 2026. This guide breaks down the current expectations, required skills, certifications, and practical experience that can help you stand out in a competitive job market.

SOC Analyst Jobs UK 2026: Salaries, Skills & How to Get Hired

Cyber security is one of the UK's fastest-growing career paths — and SOC analyst is where most people begin. It's in high demand, genuinely accessible, and you don't need a degree or years of experience to get started. But knowing what UK employers actually want in 2026 — what they pay, which certs matter, and how to stand out — is a different matter. This guide covers all of it.